last executing test programs: 16m2.078993214s ago: executing program 32 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk_0/alua/test_group\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) 15m8.40510267s ago: executing program 33 (id=410): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x38, r3, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 14m35.10183189s ago: executing program 34 (id=525): setreuid(0xee01, 0x0) socket(0x1d, 0x1, 0x9) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) 14m1.370673945s ago: executing program 35 (id=841): syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x3b39dcf45346234) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 13m37.349609309s ago: executing program 8 (id=1026): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) 13m37.25872458s ago: executing program 8 (id=1028): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz0\x00', 0x4b}) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x8fb5, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13m37.161936071s ago: executing program 8 (id=1029): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/acm.0\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/acm.0\x00', 0x200) 13m37.040490202s ago: executing program 8 (id=1030): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 13m36.993955411s ago: executing program 8 (id=1032): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x1e5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 13m36.944703741s ago: executing program 8 (id=1033): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) 13m21.892206138s ago: executing program 36 (id=1033): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) 11m34.753969706s ago: executing program 7 (id=1805): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x851a, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='ms_mode\x00', &(0x7f0000000200)='legacy\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='mount_timeout\x00', &(0x7f0000000280)='5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000300)="63657068207630323700000000000000000002001a857f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001a857f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001ffffffffffffffff010000000100000000000000000000000007010000000000000000000000000004000000000000000000000000001000000000000100"/360, 0x16a) 11m33.734596832s ago: executing program 7 (id=1814): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff, 0x40, 0x444, &(0x7f0000000800)="5674f1284b66baa4dba90b6e5a09937b27946e50751f39be0a54c925c96e4e3599a3b8a834f8a2be743fd8f77a5ff6a3cb874484426f2fe2d331bf3cd01efcdae7e61eb6bb6e89f481c283aaee3567b6e41774e76ce0c2f054354dd81bc0cc13573671a0d1ec39a094d06676949a280af58fd6b634719cc08a2effc5d9fb77fdf433df904e36af5da605eea32626d409b9cf32d0e803d00fa5a3e51daf0cfa4756b0d6479181799057ad546c8fe2a5ada085376b7bbb0f821fbec345638c9b4240d27cbbd0f2d8d3483daba12bbec9b79c67b05248a348728c3e617cb07d9bcfeb43b5e00b1c726cc7b5ac2a6a9966516e59a1fcbbf36a758565c77482c7ad749eec18be2fa279bbb5dbc5e72d0e6522b77cb9523658faeab1af6861277febf46f3b5a8dfc8a2891a555897ac0ed200b4a91042ef8751c441b16d9ad0759bbc10719800372545bbabddf6c9c024fd8e513b24101b86ac45d19024b10609b2e7e024988b9d5dc2670cdbedd7a3953122b59735e029dd9fbd20ecbec6f1dff21ea3355c5be7f3a3122eaa029abf5371380971b941a55d5c98821dd467c2b74af669dc8b9a5cfd1160ca392ec02902d6200d21dbfe5b122207cc1c74e59c9cb8f73d018621a568f78f36e6e65cfc4d8a6d87dd5045f5744deb710b81bd88ead5e8db7790dfa57bda48401595cce05a58437b373bb031f599295f476229f1339b42183197bf7c3bee3b0b14b6fffadb907af7b698b911889da4b36d5c60dd81eac7214528a8826c099add55b43d0dafab1053b5f8b8d2b9377fd72de6f318907b0dc47ab12df8d0050008b570b6f0bec4843629b495129823aa7263345d70cc42d2f5904da8d67720fa0072570a61af3175512719afdd90f9a31c496e3a6e98889abce111c92fb3f977011e7c367ce13a2ec7277d9082dae1c0454aadcf9c9f211fa66b5d15089deca4b4ba48735b2932a937e12b0258591c16b42f06b08c25d40ba3643be90d2ebc2b54d273ee3f4f1d68502a7ce968cf34f02226e343eca3cd69a0b5c66539606a184bdfe5c41fe62b6185de94af5fd27cc4927e6760cdbffeddae789bb4d8499eaea4249e2b281b9e654a6ba85f6b2d341026e7590d38b49fc4881f8255c84f05c2389e176f1cca1d648d9c4a5d22b6e3225ec36d8f44d75c99d49f14096aa9d003eb21f08d9caf0591e36e8a7ced2f875d56652cc8d37b960e7307b5a79f4a23ef082ec1b72e671e6e5ab135711e5625dc0506f86982605e886906dfe968701a13f864d10a3940994d43cd24014081884b387eb94cac089d5aa06f37b4c5c8869dae4c046de49a2d824ada8b78abb4e3ce34d97b5e7d1e0112ddd07cb8602ac018f2a1f6aa55cd588992d94465c6acebdd1803a975ce215dc0adac8654dd0bd153aa34b1a2975ddbc6db5a077bb295f8ec261037a88b5aec954e1168f1ac714336fdc14e807393dffbff8a76f6d6fa515abb291a2ab7d112cb76d09d5dc862bc7b070d44455ab3121791d86577ca163a86cdca4ba059f2a2f8dc2e6befc", 0xfe, 0x27, 0x8, 0x6, 0x4c6f, 0x2, 0x5, 'syz0\x00'}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 11m33.164591883s ago: executing program 7 (id=1821): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r0, 0xa) r1 = syz_io_uring_setup(0x2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000600)}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000700)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x1ff) mount(&(0x7f0000000800)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000900)='./file0\x00', &(0x7f0000000a00)='cifs\x00', 0x0, &(0x7f0000000b00)='echo_interval=1,user=root,pass=root,ip=127.0.0.1,soft\x00') 11m31.991992586s ago: executing program 7 (id=1830): r0 = socket$netlink(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 11m30.800703687s ago: executing program 7 (id=1835): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 11m30.556202621s ago: executing program 7 (id=1839): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 11m15.456423387s ago: executing program 37 (id=1839): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 11m15.249119839s ago: executing program 9 (id=1907): r0 = socket$kcm(0x2, 0x5, 0x84) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xfffffffd, 0x4, 0xa}, {0x10000002, 0x4, 0xb}], 0x10, 0xa}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000480)="be", 0x1}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x2) 11m14.752281526s ago: executing program 9 (id=1909): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, 0x0, 0x4003) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x0, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000200)=0x28) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x0, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x2, 'syz0\x00'}, &(0x7f0000000200)=0x28) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x48, 0xa, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1f90}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x48}}, 0x0) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) 11m9.157744582s ago: executing program 9 (id=1928): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) openat(0xffffffffffffff9c, 0x0, 0x842, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r1, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r0, 0x7) 11m8.88270603s ago: executing program 9 (id=1931): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x9, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 11m8.402289874s ago: executing program 9 (id=1935): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='debugfs\x00', &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000800000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000800000/0x200000)=nil, 0x200000, 0xe) read(r1, &(0x7f0000800000), 0x200000) madvise(&(0x7f0000800000/0x200000)=nil, 0x200000, 0x19) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000600)='3,0x7f0000800000,0x7f0000a00000,0,-1\x00', 0x24) 11m7.865455855s ago: executing program 9 (id=1936): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18) 10m52.646660444s ago: executing program 38 (id=1936): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18) 8m44.113023138s ago: executing program 2 (id=2458): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304, 0x38}, "b575c2c1c3a227b7", "799298c9493f4cbdfb5868d41337f3a2", "8df6bd29", 'H\x00'}, 0x28) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) 8m43.23732905s ago: executing program 2 (id=2462): mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001cc0)='erofs\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x610003d5) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x7, 0x16, &(0x7f0000002880)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) r2 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0x3c3b, 0x2000, 0x5, 0x2d4}) io_uring_setup(0x7625, &(0x7f00000002c0)={0x0, 0x653f, 0x10000, 0x0, 0x28e, 0x0, r2}) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c000780080012400006000013000300686173683a6e65742c69666163650000050005000a00000005000400000000000900020073797a31000000000500010007000000b04cdeadb48125cf682d8820a8ead8b4123b0b86ef70cf3f2ee6ffaf9953d4c4595c5b7514bcb37fddfb58b29073b251c70360d1354426de"], 0x58}}, 0x0) 8m38.187715852s ago: executing program 2 (id=2471): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x26, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x63, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m35.04439445s ago: executing program 2 (id=2478): r0 = epoll_create1(0x80000) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) dup3(r8, r0, 0x0) 8m33.368629617s ago: executing program 2 (id=2489): r0 = userfaultfd(0x801) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x27f9, 0x1000, 0x1, 0x35d}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) close_range(r0, r0, 0x0) 8m29.692514916s ago: executing program 2 (id=2496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8041, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x40003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80000000, 0x7, 0x3, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 8m28.995096644s ago: executing program 39 (id=2496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8041, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x40003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80000000, 0x7, 0x3, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2m39.279679713s ago: executing program 5 (id=3772): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xb}, {}, {0xfff2, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) 2m36.112676502s ago: executing program 5 (id=3776): quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0xee01, 0x0) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000001000000380001800600010002000000080005000000feff0b000700000000000000000008000900000000000800080000000000080006"], 0x4c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername(r4, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) poll(0x0, 0x0, 0x2) 2m31.798199923s ago: executing program 5 (id=3784): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000004000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000de00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000f00)=""/102400, 0x19000) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 2m31.524198743s ago: executing program 5 (id=3786): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xffffffff}, 0x10) recvmmsg$unix(r1, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1, 0x0, 0xfffffd26}}], 0x1, 0x0, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000400100018df0000a4e2000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009da613666249f4a21e9cc79c5bcdb2968b1c863bf950fd47932405e838cd5255ff3d0d1ed2a09643219e7001ca380a9290679f2b31accbc61aba"], 0x50) syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x400000) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r4}, 0x38) 2m29.294890659s ago: executing program 5 (id=3790): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) tkill(0x0, 0x4) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000040)='./file2\x00', 0x8) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2m27.384715346s ago: executing program 5 (id=3800): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) request_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0xffffffffffffffff) recvmmsg(r2, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) 2m12.042916236s ago: executing program 40 (id=3800): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) request_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0xffffffffffffffff) recvmmsg(r2, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) 1m42.499061095s ago: executing program 0 (id=3896): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, &(0x7f0000000480)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r5], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01"], 0x3c}}, 0x0) 1m41.446625861s ago: executing program 0 (id=3899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0xfff, 0x1, 0xa, 0x5}) socket$igmp(0x2, 0x3, 0x2) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7) 1m38.195335654s ago: executing program 0 (id=3901): socketpair(0x27, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001400b59500000c00000000000ac0"], 0x18}}, 0x0) r1 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x8, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, 0x0) kcmp(r1, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @multicast2}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 1m29.890825727s ago: executing program 0 (id=3915): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x89, 0x2, 0xfd, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x93}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x4c, 0x40002020, &(0x7f0000000100), 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) shutdown(r0, 0x1) 1m24.828286185s ago: executing program 0 (id=3924): socket(0x10, 0x80003, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a3c0000000e0a050000000000000000000a0000050900010073797a3100000000100003800c00008008000340000000030900020073797a31000000001400000d1100010000400000000000000500000a"], 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000270009002abd7000fddbdf250e"], 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r2 = msgget$private(0x0, 0x193) msgsnd(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="02"], 0x401, 0x0) msgsnd(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgsnd(r2, &(0x7f0000000300)=ANY=[@ANYRES8], 0x3f9, 0x0) msgrcv(r2, &(0x7f00000002c0), 0x8, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xc, 0x4, 0x4, 0xc}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) 1m23.311404562s ago: executing program 0 (id=3928): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4008004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600"], 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x3}, 0x1}], 0x1, 0x20, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x4718}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd090000850000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES64], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000100)="c8d1a72cfc5da43d1d1f0e0cd056b6ae5af9c6e39f25e6376911f3c2f41898d5ba56b297882c8224", &(0x7f0000000100), 0x1800, r3}, 0x38) 1m6.816199952s ago: executing program 41 (id=3928): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4008004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600"], 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x3}, 0x1}], 0x1, 0x20, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x4718}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd090000850000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES64], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000100)="c8d1a72cfc5da43d1d1f0e0cd056b6ae5af9c6e39f25e6376911f3c2f41898d5ba56b297882c8224", &(0x7f0000000100), 0x1800, r3}, 0x38) 14.187309088s ago: executing program 1 (id=4063): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) wait4(0x0, 0x0, 0x0, 0x0) 12.07414501s ago: executing program 1 (id=4066): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x25f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x4, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x80, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfdf, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 11.471417049s ago: executing program 3 (id=4070): mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat(0xffffffffffffff9c, 0x0, 0x10a942, 0x9f667fd378a54ed4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, 0x0, &(0x7f00000004c0)='GPL\x00', 0x2, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x2b, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10119, 0x2, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) 10.265936538s ago: executing program 3 (id=4071): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) capset(&(0x7f0000000080)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x4, 0x6, 0x5, 0x8, 0x0, 0x2}) fanotify_init(0x8, 0x80000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) 9.428561109s ago: executing program 4 (id=4073): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x40, 0x1}}, 0x50) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x202, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r4, 0x0, &(0x7f0000605000/0x3000)=nil, 0x3000, 0x100}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000000)={0xc, r4}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"]) 9.019302478s ago: executing program 3 (id=4074): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) r5 = openat$rtc(0xffffffffffffff9c, 0x0, 0x20800, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, 0x0) socket(0x2, 0x3, 0x100000001) 8.481177959s ago: executing program 4 (id=4075): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043146ffffffff"], 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) 8.288546626s ago: executing program 4 (id=4076): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40840, 0x17f) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000840), &(0x7f0000000140)=r1}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[], 0x0) 8.261277426s ago: executing program 1 (id=4077): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x10) memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) close(r2) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000400), 0x0, 0x400) 8.043485793s ago: executing program 3 (id=4078): r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff0000000904010102ff0000000705870240"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0xe, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x48, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x80008071, 0x7, 0x8, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x3, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x4, 0xc8, 0xf9, 0xe, 0x2c0, 0x7, 0x209, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x9, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x8000047, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x24f, 0x42, 0x3], [0x7, 0x408, 0x2, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x26, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x0, 0x4, 0x2950bfaf, 0x1000, 0x4b2760ed, 0x7, 0xa9, 0x6, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x0, 0x3c484551], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x93a, 0x5, 0x6, 0x1, 0x8, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x201, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0x3, 0x2, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x6b, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x9, 0x5, 0x5, 0x8, 0x30b1d693, 0x0, 0xf40, 0x400007, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) r1 = socket$kcm(0x21, 0x2, 0x2) syz_open_procfs(0x0, 0x0) r2 = signalfd(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d40)={0x2c, &(0x7f0000000ac0)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0}) 6.917654964s ago: executing program 1 (id=4079): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0xd}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x228, 0x0, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x22}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x75b1817ec7c0652, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x854, 0x20c0}, 0x80, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xa, @remote, @empty, @port=0x4e22, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0xffffffffffffffff, 0x4, 0x3}, 0x3, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e21, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) read(r0, &(0x7f0000001400)=""/4046, 0xffd8) syz_usb_connect$uac1(0x3, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000002068000301ee403f0904000000010100000a2401d2000a0002010209040100000102000009040101010102000009050109ff037808b20725010804030009040200000102000009040201010102000008240201fc030801090582090002030201072501000e0300"/122], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 6.363790166s ago: executing program 6 (id=4080): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 6.263991261s ago: executing program 4 (id=4082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x40003) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, 0x1}, 0x1c, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000440)}, {&(0x7f0000000480)}], 0x3}}], 0x1, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000100)={0x200000, 0x200000, 0x1000002, 0x0, 0xd33, 0xd26d}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r4, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r4, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLL', 0xe}) 5.038026697s ago: executing program 6 (id=4083): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000640)={0x0, 0xbc38, 0x20, 0x3, 0xb2, 0x0, r1}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181b, 0x4, 0x1, 0x8002ad, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x0, 0x9, 0x102, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x80000, 0x7, 0x800102c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0f, 0x1000, 0x1, 0x800021b, 0x0, r1}}], 0x4, &(0x7f0000000780)={0x2e, 0x46, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x1, 0xb9c, 0x0, 0x0}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 4.504533376s ago: executing program 4 (id=4084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x34, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb0800"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x34}}, 0x0) 3.819742321s ago: executing program 1 (id=4085): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xfffffffb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000080)=0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 3.722988176s ago: executing program 6 (id=4086): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000740)=@v3={0x3000000, [{0x101, 0x3}, {0x5, 0x1ff}]}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 2.808480662s ago: executing program 1 (id=4087): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340), 0x0) bind$can_raw(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0xd, 0x141102) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x9, 0x0, 0x11}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20008010) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc9, 0x17, 0xb, "7a91934ae4b05108"}}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x80, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.483045685s ago: executing program 6 (id=4088): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x4c, 0x1a, 0x198, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x138, 0x168, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16], 0x38}}, 0x0) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000500)=0x3) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) fchdir(r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.391601242s ago: executing program 3 (id=4089): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007200)=ANY=[@ANYBLOB="1201500200000020c016e175400001020350030903"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)=0x24) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x3a5800, 0x88) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x40, 0x17, 0x5, 0x4, 0x42, 0x5ff2, 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100005ff00"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="0a0001"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x8000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) 1.084562018s ago: executing program 6 (id=4090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@float={0x1}]}}, 0x0, 0x26, 0x0, 0x1, 0xff}, 0x28) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = signalfd(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000280)={0x6, 0xff, 0x1}) sendmsg$IPSET_CMD_GET_BYINDEX(r0, 0x0, 0x44010) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x10000008) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) recvfrom$inet_nvme(r5, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 320.440925ms ago: executing program 3 (id=4091): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x4c2a89a2ae8053c2, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x4}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @nl=@unspec, 0x81, 0x0, 0x0, 0x0, 0x4, 0x0, 0x401, 0x2, 0x5}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7) r1 = socket$kcm(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f0000000640), 0x4) 187.310909ms ago: executing program 6 (id=4092): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000010c0)="91fa5f0044470000449ce60865d008539e1a81deee68ba010000", 0x1a}], 0x1, 0x0, 0x0, 0x8885}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[], 0x20) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6}, 0x10) r3 = syz_io_uring_setup(0x38fe, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x165, &(0x7f0000000180)={0x0, 0xd9eb, 0x40, 0x10000003, 0x400015f, 0x0, r3}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000580)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0xd07, 0x8, 0x12, r3, 0x8000000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0xda, 0x45, 0xa1, 0x40, 0x424, 0x12c, 0x4e40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7f, 0x0, 0x50, 0xd, "", [{{0x9, 0x4, 0x8a, 0x0, 0x1, 0xf5, 0x81, 0x89, 0x2c, [], [{{0x9, 0x5, 0xc, 0x2, 0x400, 0x7, 0x7, 0xa}}]}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r6, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) 0s ago: executing program 4 (id=4093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000580)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xc) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) rmdir(&(0x7f0000000180)='./cgroup/../file0\x00') kernel console output (not intermixed with test programs): exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83f99e0d9 code=0x7ffc0000 [ 584.951027][ T29] audit: type=1326 audit(1787583840.834:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15747 comm="syz.4.2676" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83f99e0d9 code=0x7ffc0000 [ 585.024595][ T29] audit: type=1326 audit(1787583840.834:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15747 comm="syz.4.2676" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83f99e0d9 code=0x7ffc0000 [ 585.116908][ T29] audit: type=1326 audit(1787583840.854:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15747 comm="syz.4.2676" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fb83f99e0d9 code=0x7ffc0000 [ 585.203835][ T29] audit: type=1326 audit(1787583840.854:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15747 comm="syz.4.2676" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83f99e0d9 code=0x7ffc0000 [ 585.311261][ T29] audit: type=1326 audit(1787583840.854:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15747 comm="syz.4.2676" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83f99e0d9 code=0x7ffc0000 [ 587.460701][T15781] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2680'. [ 587.514261][T15792] dummy0: left promiscuous mode [ 587.804891][T15775] lo speed is unknown, defaulting to 1000 [ 588.248602][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 588.248621][ T29] audit: type=1400 audit(1787583844.504:4813): avc: denied { write } for pid=15789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.352312][T15809] xt_check_target_common: 12 callbacks suppressed [ 588.352327][T15809] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 588.461491][T15811] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 588.485249][T15814] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 588.572653][T15819] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 588.594334][ T29] audit: type=1400 audit(1787583844.844:4814): avc: denied { write } for pid=15812 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.713453][T15822] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 588.890122][T15809] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 589.020239][T15811] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 589.180869][T15809] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 589.247491][T15811] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 589.312474][T15814] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 589.470537][T15839] netlink: 'syz.6.2689': attribute type 10 has an invalid length. [ 589.512622][T15839] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.520029][T15839] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.616825][T15839] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.623941][T15839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.631332][T15839] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.638401][T15839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.679639][ T29] audit: type=1400 audit(1787583845.914:4815): avc: denied { write } for pid=15824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 589.866755][T15839] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 589.960550][ T29] audit: type=1400 audit(1787583846.214:4816): avc: denied { write } for pid=15846 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 590.145059][T15853] netlink: 'syz.0.2693': attribute type 1 has an invalid length. [ 590.326317][ T5695] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 590.341884][T15856] 8021q: adding VLAN 0 to HW filter on device bond9 [ 590.407493][T15856] bond8: (slave bond9): making interface the new active one [ 590.440524][T15856] bond8: (slave bond9): Enslaving as an active interface with an up link [ 590.496600][ T5695] usb 7-1: Using ep0 maxpacket: 8 [ 590.519179][ T5695] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 590.566843][ T5695] usb 7-1: config 0 has no interfaces? [ 590.574348][ T5695] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.630726][ T5695] usb 7-1: config 0 descriptor?? [ 590.855129][ T29] audit: type=1400 audit(1787583847.104:4817): avc: denied { write } for pid=15854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 590.919911][T15880] erspan0: left promiscuous mode [ 590.969196][ T5695] usb 7-1: USB disconnect, device number 3 [ 591.092803][ T29] audit: type=1400 audit(1787583847.344:4818): avc: denied { write } for pid=15882 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.295293][T15902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2710'. [ 592.796631][T15906] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2702'. [ 593.253923][ T29] audit: type=1400 audit(1787583849.504:4819): avc: denied { write } for pid=15889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.572715][ T29] audit: type=1400 audit(1787583849.824:4820): avc: denied { write } for pid=15932 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.322465][ T29] audit: type=1400 audit(1787583851.574:4821): avc: denied { write } for pid=15936 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.113754][ T29] audit: type=1400 audit(1787583852.354:4822): avc: denied { write } for pid=15961 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.168431][T15950] lo speed is unknown, defaulting to 1000 [ 597.519040][ T29] audit: type=1400 audit(1787583853.514:4823): avc: denied { getopt } for pid=15964 comm="syz.3.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 597.650816][T15968] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.658178][T15968] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.972223][T15968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.024385][T15968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.154931][ T29] audit: type=1400 audit(1787583854.404:4824): avc: denied { write } for pid=15965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.350937][ T29] audit: type=1400 audit(1787583854.604:4825): avc: denied { write } for pid=15985 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.439602][T15989] tipc: Failed to remove unknown binding: 66,0,0/2627680691:1557972954/1557972956 [ 598.516397][T15989] tipc: Failed to remove unknown binding: 66,0,0/2627680691:1557972954/1557972955 [ 598.551622][T15997] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2727'. [ 598.641846][T15989] tipc: Failed to remove unknown binding: 66,0,0/2627680691:1557972954/1557972956 [ 598.728385][ T9153] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.768887][ T9153] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.823804][T15989] tipc: Failed to remove unknown binding: 66,0,0/2627680691:1557972954/1557972955 [ 598.849151][ T9153] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.925500][T11933] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.971501][ T29] audit: type=1400 audit(1787583855.224:4826): avc: denied { firmware_load } for pid=15986 comm="syz.0.2727" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 599.270530][T15988] syz.0.2727 (15988) used greatest stack depth: 19896 bytes left [ 599.840665][T16022] pim6reg1: entered promiscuous mode [ 599.881811][T16022] pim6reg1: entered allmulticast mode [ 600.191678][T16039] tipc: Enabling of bearer rejected, failed to enable media [ 600.577302][T16044] bridge0: port 3(vlan2) entered blocking state [ 600.644097][T16046] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2733'. [ 600.664737][ T5796] libceph: connect (1)[c::]:6789 error -99 [ 600.695352][T16044] bridge0: port 3(vlan2) entered disabled state [ 600.703224][ T5796] libceph: mon0 (1)[c::]:6789 connect error [ 600.717427][T16046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2733'. [ 600.782043][T16049] ceph: No mds server is up or the cluster is laggy [ 600.822409][T16044] vlan2: entered allmulticast mode [ 600.834211][ T29] audit: type=1400 audit(1787583857.064:4827): avc: denied { write } for pid=16024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 600.879490][T16046] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2733'. [ 600.913403][T16044] geneve0: entered allmulticast mode [ 601.004019][T16044] vlan2: entered promiscuous mode [ 601.075289][ T29] audit: type=1400 audit(1787583857.324:4828): avc: denied { write } for pid=16062 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.149254][T16044] geneve0: entered promiscuous mode [ 601.258782][T16061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2735'. [ 602.459058][ T29] audit: type=1400 audit(1787583858.714:4829): avc: denied { write } for pid=16071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 602.501900][T16102] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2746'. [ 602.614186][ T29] audit: type=1400 audit(1787583858.824:4830): avc: denied { name_bind 0x1000000 } for pid=16100 comm="syz.5.2746" path="socket:[56619]" dev="sockfs" ino=56619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 602.780880][ T29] audit: type=1400 audit(1787583859.004:4831): avc: denied { write } for pid=16106 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 602.920063][ T29] audit: type=1400 audit(1787583859.024:4832): avc: denied { wake_alarm } for pid=16105 comm="syz.4.2747" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 603.561258][T16130] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 603.632291][T16136] ve: renamed from veth0_vlan [ 603.722704][T16130] kvm: requested 154209 ns i8254 timer period limited to 200000 ns [ 603.775108][T16130] kvm: requested 124038 ns i8254 timer period limited to 200000 ns [ 603.823906][ T29] audit: type=1400 audit(1787583860.074:4833): avc: denied { write } for pid=16112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 603.868053][T16130] kvm: requested 112304 ns i8254 timer period limited to 200000 ns [ 603.895108][T16130] kvm: requested 46933 ns i8254 timer period limited to 200000 ns [ 604.033878][T16130] kvm: requested 140800 ns i8254 timer period limited to 200000 ns [ 604.082138][T16130] kvm: requested 155885 ns i8254 timer period limited to 200000 ns [ 604.130898][T16130] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 604.144571][ T29] audit: type=1400 audit(1787583860.394:4834): avc: denied { write } for pid=16145 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 604.213776][T16130] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 604.233146][T16130] kvm: requested 11733 ns i8254 timer period limited to 200000 ns [ 605.293611][ T29] audit: type=1400 audit(1787583861.544:4835): avc: denied { write } for pid=16153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.579998][ T29] audit: type=1400 audit(1787583861.834:4836): avc: denied { write } for pid=16180 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.815148][ T5259] eql: remember to turn off Van-Jacobson compression on your slave devices [ 606.741134][T16205] netlink: 'syz.3.2768': attribute type 1 has an invalid length. [ 606.790165][T16205] netlink: 'syz.3.2768': attribute type 4 has an invalid length. [ 606.820426][T16206] netlink: 'syz.3.2768': attribute type 1 has an invalid length. [ 606.929889][T16205] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2768'. [ 606.972934][T16206] netlink: 'syz.3.2768': attribute type 4 has an invalid length. [ 607.265127][T16206] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2768'. [ 607.919421][T16225] xt_HMARK: spi-set and port-set can't be combined [ 608.091562][T16233] netlink: 'syz.6.2774': attribute type 1 has an invalid length. [ 608.171910][ T29] audit: type=1326 audit(1787583864.424:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16223 comm="syz.3.2772" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f172479e0d9 code=0x0 [ 608.333258][T16233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 608.428174][T16236] bond1: (slave geneve2): making interface the new active one [ 608.523147][T16236] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 608.626684][T11922] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.679859][T11922] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.760561][T11922] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.808180][ T29] audit: type=1400 audit(1787583865.054:4838): avc: denied { write } for pid=16217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 608.858062][T11922] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.895874][T16248] netlink: 'syz.6.2776': attribute type 4 has an invalid length. [ 608.960489][T16248] netlink: 'syz.6.2776': attribute type 4 has an invalid length. [ 609.159390][ T29] audit: type=1400 audit(1787583865.414:4839): avc: denied { write } for pid=16252 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.478932][T16264] netlink: 'syz.0.2780': attribute type 12 has an invalid length. [ 614.592743][ T29] audit: type=1400 audit(1787583870.844:4840): avc: denied { mount } for pid=16358 comm="syz.3.2804" name="/" dev="pstore" ino=2034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 614.892779][T16372] fuse: fd is not a fuse device [ 618.138180][T16407] jffs2: notice: (16407) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 619.373264][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 619.383954][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 620.553202][T16422] 9pnet_fd: p9_fd_create_tcp (16422): problem connecting socket to 127.0.0.1 [ 622.156373][ T29] audit: type=1400 audit(1787583878.404:4841): avc: denied { write } for pid=16405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.238479][T16446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2826'. [ 623.294977][ T29] audit: type=1400 audit(1787583878.934:4842): avc: denied { write } for pid=16453 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.760430][ T29] audit: type=1400 audit(1787583881.014:4843): avc: denied { write } for pid=16473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.953873][T16509] fuse: Bad value for 'fd' [ 625.086368][ T29] audit: type=1400 audit(1787583881.344:4844): avc: denied { write } for pid=16513 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.522989][T16530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2847'. [ 627.379311][ T29] audit: type=1400 audit(1787583883.634:4845): avc: denied { write } for pid=16525 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.739450][ T29] audit: type=1400 audit(1787583883.994:4846): avc: denied { write } for pid=16547 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.009995][T16550] netlink: 'syz.5.2850': attribute type 10 has an invalid length. [ 628.072775][T16550] team0: Cannot enslave team device to itself [ 628.119044][ T29] audit: type=1400 audit(1787583884.374:4847): avc: denied { getopt } for pid=16549 comm="syz.5.2850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 628.332833][T16561] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2852'. [ 628.856406][ T29] audit: type=1400 audit(1787583885.114:4848): avc: denied { write } for pid=16553 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.297279][ T29] audit: type=1400 audit(1787583885.544:4849): avc: denied { write } for pid=16582 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.533668][ T29] audit: type=1326 audit(1787583887.784:4850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16592 comm="syz.4.2859" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83f99e0d9 code=0x7ffc0000 [ 631.698124][ T29] audit: type=1326 audit(1787583887.784:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16592 comm="syz.4.2859" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83f99e0d9 code=0x7ffc0000 [ 631.859863][ T29] audit: type=1326 audit(1787583887.834:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16592 comm="syz.4.2859" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83f99e0d9 code=0x7ffc0000 [ 631.974016][ T29] audit: type=1326 audit(1787583887.834:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16592 comm="syz.4.2859" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83f99e0d9 code=0x7ffc0000 [ 632.044379][ T29] audit: type=1326 audit(1787583887.834:4854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16592 comm="syz.4.2859" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb83f99e0d9 code=0x7ffc0000 [ 632.592958][T16621] ceph: No mds server is up or the cluster is laggy [ 632.600160][ T5695] libceph: connect (1)[c::]:6789 error -22 [ 632.620055][ T5695] libceph: mon0 (1)[c::]:6789 connect error [ 635.327713][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 635.327724][ T29] audit: type=1400 audit(1787583891.584:4924): avc: denied { write } for pid=16639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.669129][ T29] audit: type=1400 audit(1787583891.924:4925): avc: denied { write } for pid=16679 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.480486][T16700] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2881'. [ 636.551682][T16706] fuse: fd is not a fuse device [ 637.887031][ T29] audit: type=1400 audit(1787583894.144:4926): avc: denied { write } for pid=16695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.385943][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2888'. [ 639.401181][ T29] audit: type=1400 audit(1787583895.644:4927): avc: denied { write } for pid=16733 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.559889][ T29] audit: type=1804 audit(1787583895.794:4928): pid=16743 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.2891" name="bus" dev="ramfs" ino=57884 res=1 errno=0 [ 639.760556][ T29] audit: type=1804 audit(1787583895.794:4929): pid=16743 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.2891" name="bus" dev="ramfs" ino=57884 res=1 errno=0 [ 639.970572][ T29] audit: type=1400 audit(1787583896.224:4930): avc: denied { write } for pid=16756 comm="syz.0.2894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 641.325934][T16764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2897'. [ 643.162812][T16792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2906'. [ 643.518671][T16809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2912'. [ 643.618066][T16809] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16809 comm=syz.0.2912 [ 643.710086][T16809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2912'. [ 644.388804][T16828] bridge_slave_0: left allmulticast mode [ 644.414739][T16828] bridge_slave_0: left promiscuous mode [ 644.452582][T16828] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.408636][ T29] audit: type=1400 audit(1787583901.664:4931): avc: denied { accept } for pid=16827 comm="syz.4.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 645.494412][T16828] bridge_slave_1: left allmulticast mode [ 645.633310][T16828] bridge_slave_1: left promiscuous mode [ 645.735801][T16828] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.879237][T16853] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2924'. [ 645.933082][T16828] bond1: (slave veth0_to_bond): Releasing active interface [ 645.970470][T16853] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2924'. [ 646.053139][T16828] bond0: (slave bond_slave_0): Releasing backup interface [ 646.182755][T16828] bond0: (slave bond_slave_1): Releasing backup interface [ 646.306014][T16864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2928'. [ 646.338410][T16828] team0: Port device team_slave_0 removed [ 646.392286][T16865] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2928'. [ 646.422879][T16828] team0: Port device team_slave_1 removed [ 646.449956][T16828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.520850][T16828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.568934][T16828] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 646.688570][T16859] macsec1: entered promiscuous mode [ 646.712103][T16859] virt_wifi0: entered promiscuous mode [ 646.805955][T16864] 8021q: adding VLAN 0 to HW filter on device bond2 [ 646.861406][T16869] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2930'. [ 646.878915][T16866] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 646.958502][T16865] bond2: entered promiscuous mode [ 646.989403][T16865] dummy0: entered promiscuous mode [ 647.021344][T16865] bond2: entered allmulticast mode [ 647.045106][T16865] dummy0: entered allmulticast mode [ 647.058950][T16877] netlink: 132732 bytes leftover after parsing attributes in process `syz.4.2931'. [ 647.104765][T16873] bond2: entered promiscuous mode [ 647.122350][T16873] bond2: entered allmulticast mode [ 647.290843][ T29] audit: type=1400 audit(1787583903.544:4932): avc: denied { getopt } for pid=16875 comm="syz.0.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 647.944456][T16894] fuse: fd is not a fuse device [ 650.985321][T16952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2953'. [ 651.517264][T16967] netlink: 'syz.5.2956': attribute type 12 has an invalid length. [ 651.533923][ T9153] IPVS: starting estimator thread 0... [ 651.636208][T16969] IPVS: using max 65 ests per chain, 156000 per kthread [ 652.833115][T16987] xt_hashlimit: size too large, truncated to 1048576 [ 653.568646][T17009] bond0: option mode: unable to set because the bond device has slaves [ 654.385981][T17011] 8021q: adding VLAN 0 to HW filter on device syzkaller0 [ 654.457938][T17009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.481105][T17018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2970'. [ 654.527877][T17018] openvswitch: netlink: Flow actions attr not present in new flow. [ 657.235831][T17025] Bluetooth: hci1: command 0x0406 tx timeout [ 658.904796][T17054] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2981'. [ 658.967311][T17057] fuse: fd is not a fuse device [ 659.062305][T17054] netlink: 11575 bytes leftover after parsing attributes in process `syz.5.2981'. [ 659.730165][ T29] audit: type=1400 audit(1787583915.984:4933): avc: denied { execute } for pid=17083 comm="syz.0.2982" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=58736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 663.140915][T17108] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 663.204431][T17112] fuse: fd is not a fuse device [ 667.516408][ T29] audit: type=1400 audit(1787584179.775:4934): avc: denied { setopt } for pid=17137 comm="syz.6.3008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 668.025127][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3016'. [ 669.284513][T17166] 8021q: adding VLAN 0 to HW filter on device bond10 [ 669.565189][T17188] netlink: 'syz.0.3030': attribute type 21 has an invalid length. [ 669.599940][T17188] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3030'. [ 671.666668][T17203] trusted_key: encrypted_key: key user:syz not found [ 673.329130][ T29] audit: type=1800 audit(1787584185.585:4935): pid=17194 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3021" name="bus" dev="ramfs" ino=58979 res=0 errno=0 [ 673.728381][T17221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3033'. [ 674.769070][ T29] audit: type=1400 audit(1787584187.025:4936): avc: denied { ioctl } for pid=17218 comm="syz.5.3032" path="socket:[59066]" dev="sockfs" ino=59066 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 674.938687][T17226] bond2 (unregistering): Released all slaves [ 675.368882][T17221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 675.386268][T17230] bond2 (unregistering): Released all slaves [ 675.470510][T17242] tipc: Started in network mode [ 675.495064][T17242] tipc: Node identity 6e41b8687181, cluster identity 4711 [ 675.538735][T17242] tipc: Enabled bearer , priority 0 [ 676.961805][T14934] tipc: Node number set to 532723816 [ 677.304530][T17275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3047'. [ 679.602741][T17302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3058'. [ 679.737340][T17302] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17302 comm=syz.0.3058 [ 679.904819][T17310] fuse: fd is not a fuse device [ 679.969586][ T29] audit: type=1400 audit(1787584192.225:4937): avc: denied { unmount } for pid=17309 comm="syz.4.3060" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 680.471099][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.477645][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 681.032602][T17345] fuse: fd is not a fuse device [ 681.585903][T17025] Bluetooth: hci5: command 0x0406 tx timeout [ 683.597462][T17393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 683.809218][T17398] netlink: 'syz.4.3097': attribute type 10 has an invalid length. [ 683.976809][T17399] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3088'. [ 684.033806][T17401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3086'. [ 684.154642][T17401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3086'. [ 684.761203][ T29] audit: type=1400 audit(1787584197.015:4938): avc: denied { read } for pid=17407 comm="syz.5.3090" name="file0" dev="tmpfs" ino=3728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 685.239075][T17413] 9p: Bad value for 'rfdno' [ 685.415888][T12162] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.473902][T12162] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.538935][T12162] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.591220][ T29] audit: type=1400 audit(1787584197.845:4939): avc: denied { accept } for pid=17418 comm="syz.4.3094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 685.621667][T12162] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.805811][T12162] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.846753][T12162] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.039193][T12162] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 686.255224][T12162] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.737242][T17438] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3100'. [ 687.054885][T17443] netlink: 'syz.3.3103': attribute type 1 has an invalid length. [ 689.043800][T17443] 8021q: adding VLAN 0 to HW filter on device bond4 [ 690.393318][T17448] bond4: (slave geneve2): making interface the new active one [ 690.471316][T17448] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 690.525697][T12162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.635765][T11925] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.685788][T11925] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.742941][T11925] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.880476][ T5600] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 690.913410][T17464] netlink: 'syz.3.3111': attribute type 1 has an invalid length. [ 691.049802][T17468] bond5: (slave geneve3): making interface the new active one [ 691.097384][T17472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3113'. [ 691.181921][T17468] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 691.330222][T17477] bridge3: port 1(erspan0) entered blocking state [ 691.488728][T17477] bridge3: port 1(erspan0) entered disabled state [ 691.596665][T17477] erspan0: entered allmulticast mode [ 691.701488][T17477] erspan0: entered promiscuous mode [ 692.777365][ T9149] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 692.847320][ T9149] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 692.917057][ T9149] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 692.963751][ T9149] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 693.386209][ T29] audit: type=1326 audit(1787584205.645:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17504 comm="syz.6.3124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 693.528636][ T29] audit: type=1326 audit(1787584205.675:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17504 comm="syz.6.3124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 693.949447][ T29] audit: type=1326 audit(1787584205.685:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17504 comm="syz.6.3124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 694.113836][ T29] audit: type=1326 audit(1787584205.685:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17504 comm="syz.6.3124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 695.117666][ T29] audit: type=1326 audit(1787584205.685:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17504 comm="syz.6.3124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 695.564649][ T29] audit: type=1326 audit(1787584205.685:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17504 comm="syz.6.3124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 695.730361][ T29] audit: type=1326 audit(1787584205.685:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17504 comm="syz.6.3124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 696.029261][ T29] audit: type=1326 audit(1787584205.685:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17504 comm="syz.6.3124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 696.233685][ T29] audit: type=1326 audit(1787584205.685:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17504 comm="syz.6.3124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 696.461162][ T29] audit: type=1326 audit(1787584205.685:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17504 comm="syz.6.3124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 698.008620][T17564] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3130'. [ 698.017980][T17564] ksmbd: Unknown IPC event: 4, ignore. [ 698.031849][T17558] lo: entered allmulticast mode [ 698.097933][T17558] tunl0: entered allmulticast mode [ 698.143302][T17558] gre0: entered allmulticast mode [ 698.183986][T17558] gretap0: entered allmulticast mode [ 698.219935][T17558] erspan0: entered allmulticast mode [ 698.294812][T17558] ip_vti0: entered allmulticast mode [ 698.337700][T17558] ip6_vti0: entered allmulticast mode [ 698.386366][T17558] sit0: entered allmulticast mode [ 698.432720][T17558] ip6tnl0: entered allmulticast mode [ 698.475377][T17572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3140'. [ 698.517422][T17558] ip6gre0: entered allmulticast mode [ 698.548496][T17558] ip6gretap0: entered allmulticast mode [ 698.567192][T17558] bridge0: entered allmulticast mode [ 698.583904][T17558] bond0: entered allmulticast mode [ 698.601753][T17558] tipc: Resetting bearer [ 698.640328][T17558] team0: entered allmulticast mode [ 698.670688][T17558] xfrm0: entered allmulticast mode [ 698.714760][T17558] nlmon0: entered allmulticast mode [ 701.031252][T17628] fuse: fd is not a fuse device [ 701.060523][T17624] bridge0: port 1(wlan1) entered blocking state [ 701.104721][T17624] bridge0: port 1(wlan1) entered disabled state [ 701.168365][T17624] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 701.376840][T17624] mac80211_hwsim hwsim26 wlan1: entered promiscuous mode [ 702.118238][T17630] mac80211_hwsim hwsim26 wlan1 (unregistering): left allmulticast mode [ 702.194692][T17630] mac80211_hwsim hwsim26 wlan1 (unregistering): left promiscuous mode [ 702.237700][T17630] bridge0: port 1(wlan1) entered disabled state [ 702.260863][T17638] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 702.593214][T17648] netlink: 132732 bytes leftover after parsing attributes in process `syz.3.3162'. [ 702.630059][T17650] bond0: option mode: unable to set because the bond device has slaves [ 703.032094][T17654] 8021q: adding VLAN 0 to HW filter on device syzkaller0 [ 703.072180][T17650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.618413][T17676] openvswitch: netlink: IPv4 tunnel dst address is zero [ 705.341664][T17696] tipc: Resetting bearer [ 706.724843][T17713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.828760][T17713] 8021q: adding VLAN 0 to HW filter on device syzkaller0 [ 707.922629][T17743] lo speed is unknown, defaulting to 1000 [ 708.473521][T17759] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3199'. [ 711.101292][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 711.101318][ T29] audit: type=1400 audit(1787584223.355:5005): avc: denied { audit_read } for pid=17790 comm="syz.6.3209" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 711.963683][T17808] xt_hashlimit: size too large, truncated to 1048576 [ 711.970675][T17808] xt_hashlimit: max too large, truncated to 1048576 [ 713.411268][T17818] overlayfs: failed to clone upperpath [ 713.686019][T17823] futex_wake_op: syz.6.3218 tries to shift op by 144; fix this program [ 715.496323][T12165] rpcbind: server 127.0.0.1 not responding, timed out [ 719.925741][T17883] xt_SECMARK: invalid mode: 2 [ 720.504117][T17886] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 720.518426][T17886] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 720.535305][T17886] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 720.551158][T17886] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 722.282442][T17910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3242'. [ 722.300040][T17910] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3242'. [ 722.312524][T17910] tipc: Invalid UDP bearer configuration [ 722.312574][T17910] tipc: Enabling of bearer rejected, failed to enable media [ 722.333307][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3241'. [ 722.360036][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3241'. [ 724.385848][T11925] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.430900][T11925] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 724.479596][T11925] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.525783][T11925] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 724.570842][T11925] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.611671][T11925] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 724.652365][T11925] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.687058][T11925] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 725.321857][ T29] audit: type=1400 audit(1787584237.575:5006): avc: denied { getopt } for pid=17969 comm="syz.6.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 727.499176][ T29] audit: type=1800 audit(1787584239.755:5007): pid=17953 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3259" name="bus" dev="ramfs" ino=61039 res=0 errno=0 [ 728.439885][ T5796] page_pool_release_retry() stalled pool shutdown: id 137, 47 inflight 60 sec [ 730.674361][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3289'. [ 730.719292][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3289'. [ 732.709271][T18059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3297'. [ 732.820393][T18062] fuse: fd is not a fuse device [ 737.064149][T18102] tipc: Started in network mode [ 737.082261][T18102] tipc: Node identity 1000001, cluster identity 4369 [ 737.114085][T18102] tipc: Node number set to 16777217 [ 737.667433][ T29] audit: type=1400 audit(1787584249.915:5008): avc: denied { map } for pid=18103 comm="syz.4.3308" path="socket:[61358]" dev="sockfs" ino=61358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 737.727295][T18102] tipc: Cannot configure node identity twice [ 737.818453][T18107] bond1: entered promiscuous mode [ 737.891256][T18107] 8021q: adding VLAN 0 to HW filter on device bond1 [ 737.954475][T18105] tipc: New replicast peer: 127.0.0.1 [ 738.011316][T18105] tipc: Enabled bearer , priority 10 [ 738.576803][T18121] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3312'. [ 739.348615][ T29] audit: type=1400 audit(1787584251.605:5009): avc: denied { write } for pid=18123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.627899][ T29] audit: type=1400 audit(1787584251.885:5010): avc: denied { write } for pid=18154 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.830086][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.838558][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.864060][ T29] audit: type=1400 audit(1787584254.115:5011): avc: denied { write } for pid=18167 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.444818][ T29] audit: type=1400 audit(1787584255.695:5012): avc: denied { write } for pid=18207 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.995372][ T5796] libceph: connect (1)[c::]:6789 error -99 [ 744.025037][ T5796] libceph: mon0 (1)[c::]:6789 connect error [ 744.069411][ T5796] libceph: connect (1)[c::]:6789 error -99 [ 744.099265][ T5796] libceph: mon0 (1)[c::]:6789 connect error [ 744.121937][T18227] ceph: No mds server is up or the cluster is laggy [ 745.248720][ T5796] libceph: connect (1)[c::]:6789 error -99 [ 745.278849][ T5796] libceph: mon0 (1)[c::]:6789 connect error [ 746.715215][ T29] audit: type=1400 audit(1787584258.965:5013): avc: denied { ioctl } for pid=18250 comm="syz.4.3341" path="socket:[61681]" dev="sockfs" ino=61681 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 746.764921][T18255] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3343'. [ 749.022507][ T29] audit: type=1400 audit(1787584261.275:5014): avc: denied { bind } for pid=18283 comm="syz.5.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 749.074707][T18286] netlink: 'syz.4.3354': attribute type 28 has an invalid length. [ 749.082684][T18286] netlink: 'syz.4.3354': attribute type 29 has an invalid length. [ 749.090655][T18286] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3354'. [ 749.103151][ T29] audit: type=1400 audit(1787584261.315:5015): avc: denied { read } for pid=18283 comm="syz.5.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 749.169642][ T29] audit: type=1400 audit(1787584261.415:5016): avc: denied { ioctl } for pid=18283 comm="syz.5.3353" path="socket:[61780]" dev="sockfs" ino=61780 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 750.975227][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3358'. [ 751.006499][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3358'. [ 752.289505][T18313] overlayfs: failed to clone upperpath [ 752.374703][T18315] sctp: [Deprecated]: syz.5.3361 (pid 18315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 752.374703][T18315] Use struct sctp_sack_info instead [ 754.508975][T18362] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.3372'. [ 754.518298][T18362] ksmbd: Unknown IPC event: 4, ignore. [ 754.693637][ T5600] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 755.887032][ T29] audit: type=1400 audit(1787584268.145:5017): avc: denied { write } for pid=18342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.351073][ T29] audit: type=1400 audit(1787584268.605:5018): avc: denied { write } for pid=18390 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 757.986248][T18405] sctp: [Deprecated]: syz.5.3385 (pid 18405) Use of struct sctp_assoc_value in delayed_ack socket option. [ 757.986248][T18405] Use struct sctp_sack_info instead [ 759.140264][T18427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3378'. [ 759.230858][T18434] netlink: 'syz.5.3393': attribute type 2 has an invalid length. [ 763.461177][T18507] fuse: fd is not a fuse device [ 763.486611][T18510] netlink: 'syz.6.3415': attribute type 11 has an invalid length. [ 763.524722][T18510] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3415'. [ 763.543446][T18505] Process accounting resumed [ 764.476803][ T29] audit: type=1326 audit(1787584276.735:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18541 comm="syz.0.3423" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ec319e0d9 code=0x0 [ 764.953836][T18559] netlink: 'syz.6.3427': attribute type 1 has an invalid length. [ 765.068017][T18559] 8021q: adding VLAN 0 to HW filter on device bond3 [ 765.119054][T18562] gretap1: entered promiscuous mode [ 765.158067][T18562] bond3: (slave gretap1): making interface the new active one [ 765.192345][T18562] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 765.262015][T18563] macvlan2: entered promiscuous mode [ 765.287671][T18563] macvlan2: entered allmulticast mode [ 765.310393][T18563] bond3: entered promiscuous mode [ 765.334401][T18563] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 765.370960][T18563] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 765.440550][T18563] bond3: left promiscuous mode [ 765.878650][T18579] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.3434'. [ 765.957566][T18583] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.3434'. [ 765.992198][T18582] ceph: No mds server is up or the cluster is laggy [ 765.999083][ T5796] libceph: connect (1)[c::]:6789 error -101 [ 766.011782][ T5796] libceph: mon0 (1)[c::]:6789 connect error [ 766.106235][T18587] ceph: No mds server is up or the cluster is laggy [ 766.113145][ T5796] libceph: connect (1)[c::]:6789 error -101 [ 766.145030][ T5796] libceph: mon0 (1)[c::]:6789 connect error [ 766.782536][T18600] IPVS: length: 31 != 24 [ 767.706517][T18607] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3439'. [ 767.804769][T18604] netlink: 'syz.3.3440': attribute type 1 has an invalid length. [ 767.812518][T18604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3440'. [ 770.850335][T18624] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3446'. [ 770.958227][T18638] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3449'. [ 771.227347][ T29] audit: type=1400 audit(1787584283.485:5020): avc: denied { setattr } for pid=18639 comm="syz.0.3448" name="[io_uring]" dev="anon_inodefs" ino=62632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 773.709356][T18672] bridge0: port 3(macvlan2) entered blocking state [ 773.731261][T18672] bridge0: port 3(macvlan2) entered disabled state [ 773.755741][T18672] macvlan2: entered allmulticast mode [ 773.769275][T18672] ip6gretap0: entered allmulticast mode [ 773.796328][T18672] macvlan2: entered promiscuous mode [ 775.421921][T18703] netlink: 'syz.4.3469': attribute type 1 has an invalid length. [ 778.292425][T18703] 8021q: adding VLAN 0 to HW filter on device bond2 [ 778.679288][T18711] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 778.807500][T18711] bond2: (slave wlan1): Enslaving as an active interface with a down link [ 778.961100][T18718] tipc: Enabling of bearer rejected, already enabled [ 781.954248][T18721] bond2: entered promiscuous mode [ 782.326024][T18721] 8021q: adding VLAN 0 to HW filter on device bond2 [ 782.356771][ T29] audit: type=1400 audit(1787584294.595:5021): avc: denied { mount } for pid=18732 comm="syz.6.3476" name="/" dev="rpc_pipefs" ino=62898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 785.941263][T18762] fuse: fd is not a fuse device [ 786.284197][T18769] fuse: fd is not a fuse device [ 786.328179][ T29] audit: type=1804 audit(1787584298.575:5022): pid=18768 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.3483" name="file1" dev="ramfs" ino=62981 res=1 errno=0 [ 786.481015][ T29] audit: type=1400 audit(1787584298.735:5023): avc: denied { write } for pid=18752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 786.622286][ T29] audit: type=1400 audit(1787584298.815:5024): avc: denied { execute } for pid=18766 comm="syz.0.3483" name="file1" dev="ramfs" ino=62981 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 786.779072][ T29] audit: type=1400 audit(1787584299.025:5025): avc: denied { write } for pid=18789 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.424564][ T29] audit: type=1800 audit(1787584299.675:5026): pid=18768 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3483" name="file1" dev="ramfs" ino=62981 res=0 errno=0 [ 788.489163][ T29] audit: type=1400 audit(1787584300.745:5027): avc: denied { write } for pid=18809 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 788.768647][ T29] audit: type=1400 audit(1787584301.025:5028): avc: denied { write } for pid=18848 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.793005][ T5796] page_pool_release_retry() stalled pool shutdown: id 137, 47 inflight 121 sec [ 794.535734][T18888] netlink: 348 bytes leftover after parsing attributes in process `syz.5.3515'. [ 794.544789][T18888] netlink: 348 bytes leftover after parsing attributes in process `syz.5.3515'. [ 800.450875][T18961] tipc: Resetting bearer [ 800.473598][T18961] virt_wifi0: left promiscuous mode [ 800.486761][T18961] macsec1: left promiscuous mode [ 800.498343][T18961] bond2: left promiscuous mode [ 800.508525][T18961] bond2: left allmulticast mode [ 800.528232][T18961] gretap1: left promiscuous mode [ 800.546175][ T9153] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.575550][ T9153] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.612418][ T9153] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.720823][ T9153] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.883427][T18970] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3541'. [ 800.894897][T18970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.905176][T18970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.914615][T18970] bond0 (unregistering): Released all slaves [ 801.093602][T18974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3543'. [ 803.268491][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.277920][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.723104][ T29] audit: type=1800 audit(1787584315.975:5029): pid=18966 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3540" name="bus" dev="ramfs" ino=63396 res=0 errno=0 [ 804.205905][ T29] audit: type=1400 audit(1787584316.455:5030): avc: denied { write } for pid=18994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.434109][T19036] tipc: Failed to remove unknown binding: 66,0,0/0:2716375665/2716375667 [ 804.443446][T19032] tipc: Failed to remove unknown binding: 66,0,0/0:1298142447/1298142448 [ 804.477894][ T29] audit: type=1400 audit(1787584316.735:5031): avc: denied { write } for pid=19033 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.536714][T19032] tipc: Failed to remove unknown binding: 66,0,0/0:1298142447/1298142448 [ 804.682451][T19044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3562'. [ 804.899963][T11926] IPVS: starting estimator thread 0... [ 804.913919][T19058] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3566'. [ 805.286665][T19059] IPVS: using max 65 ests per chain, 156000 per kthread [ 805.495035][T19073] lo: entered allmulticast mode [ 805.504807][T19072] lo: left allmulticast mode [ 807.882387][T19107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3580'. [ 808.654538][T19126] bond0: (slave bridge0): Releasing backup interface [ 809.518918][T19126] bridge_slave_0: left allmulticast mode [ 809.538319][T19126] bridge_slave_0: left promiscuous mode [ 809.754259][T19126] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.890470][T19126] bridge_slave_1: left allmulticast mode [ 809.920820][T19126] bridge_slave_1: left promiscuous mode [ 810.070401][T19126] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.103417][T19136] overlayfs: failed to clone upperpath [ 810.275117][T19126] bond0: (slave bond_slave_0): Releasing backup interface [ 810.322299][T19126] bond0: (slave bond_slave_1): Releasing backup interface [ 810.360095][T19126] team0: Port device team_slave_0 removed [ 810.397353][T19126] team0: Port device team_slave_1 removed [ 810.419798][T19126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.445871][T19126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.471131][T19126] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 810.528351][T19135] team0: Mode changed to "broadcast" [ 811.495379][ T29] audit: type=1326 audit(1787584323.745:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19160 comm="syz.5.3598" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5b19e0d9 code=0x7ffc0000 [ 811.707706][ T29] audit: type=1326 audit(1787584323.785:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19160 comm="syz.5.3598" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5b19e0d9 code=0x7ffc0000 [ 812.638950][ T29] audit: type=1326 audit(1787584323.805:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19160 comm="syz.5.3598" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1e5b19e0d9 code=0x7ffc0000 [ 812.733654][ T29] audit: type=1326 audit(1787584323.805:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19160 comm="syz.5.3598" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5b19e0d9 code=0x7ffc0000 [ 812.840539][ T29] audit: type=1326 audit(1787584323.805:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19160 comm="syz.5.3598" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5b19e0d9 code=0x7ffc0000 [ 812.993588][ T29] audit: type=1326 audit(1787584323.815:5037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19160 comm="syz.5.3598" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f1e5b19e0d9 code=0x7ffc0000 [ 813.053148][T19178] netlink: 'syz.6.3604': attribute type 1 has an invalid length. [ 813.105037][T19159] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3597'. [ 813.129417][T19178] bond4: entered promiscuous mode [ 813.137804][ T29] audit: type=1326 audit(1787584323.815:5038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19160 comm="syz.5.3598" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5b19e0d9 code=0x7ffc0000 [ 813.198746][T19178] bond4: entered allmulticast mode [ 813.204420][T19182] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3604'. [ 813.214005][T19178] 8021q: adding VLAN 0 to HW filter on device bond4 [ 813.277335][ T29] audit: type=1326 audit(1787584323.815:5039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19160 comm="syz.5.3598" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5b19e0d9 code=0x7ffc0000 [ 813.327156][T19181] erspan1: entered allmulticast mode [ 813.334112][T19181] bond4: (slave erspan1): making interface the new active one [ 813.368951][T19181] erspan1: entered promiscuous mode [ 813.403614][T19181] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 813.420763][ T29] audit: type=1326 audit(1787584323.825:5040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19160 comm="syz.5.3598" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e5b19e0d9 code=0x7ffc0000 [ 813.573058][T19182] bond4 (unregistering): (slave erspan1): Releasing active interface [ 813.603635][ T29] audit: type=1326 audit(1787584323.825:5041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19160 comm="syz.5.3598" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5b19e0d9 code=0x7ffc0000 [ 813.647526][T19182] erspan1: left promiscuous mode [ 813.691390][T19182] bond4 (unregistering): Released all slaves [ 818.020240][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 818.020251][ T29] audit: type=1400 audit(1787584330.265:5050): avc: denied { write } for pid=19230 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.461041][T19263] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 819.809295][ T29] audit: type=1400 audit(1787584332.065:5051): avc: denied { write } for pid=19247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.132380][ T29] audit: type=1400 audit(1787584332.385:5052): avc: denied { write } for pid=19279 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.200228][T19282] IPVS: Error connecting to the multicast addr [ 823.180685][T19291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3628'. [ 823.369160][T19291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3628'. [ 823.399137][T19302] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3631'. [ 827.499682][ T29] audit: type=1400 audit(1787584339.755:5053): avc: denied { write } for pid=19290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 827.655061][T19332] aoe: error packet from 27747.0@lo; ecode=101 'no such error' [ 827.662664][T19332] aoe: error packet from 27747.0@lo; ecode=101 'no such error' [ 827.670220][T19332] aoe: error packet from 27747.0@lo; ecode=101 'no such error' [ 827.677762][T19332] aoe: error packet from 27747.0@lo; ecode=101 'no such error' [ 827.685304][T19332] aoe: error packet from 27747.0@lo; ecode=101 'no such error' [ 827.692853][T19332] aoe: error packet from 27747.0@lo; ecode=101 'no such error' [ 827.700400][T19332] aoe: error packet from 27747.0@lo; ecode=101 'no such error' [ 827.707952][T19332] aoe: error packet from 27747.0@lo; ecode=101 'no such error' [ 827.715488][T19332] aoe: error packet from 27747.0@lo; ecode=101 'no such error' [ 827.723007][T19332] aoe: error packet from 27747.0@lo; ecode=101 'no such error' [ 827.847415][T19338] netlink: 'syz.4.3639': attribute type 10 has an invalid length. [ 827.877146][ T29] audit: type=1400 audit(1787584340.135:5054): avc: denied { write } for pid=19336 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 827.959867][T19338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.098468][T19338] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 828.967674][T19329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3637'. [ 829.007690][ T29] audit: type=1400 audit(1787584341.265:5055): avc: denied { write } for pid=19346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 829.232664][T19368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3643'. [ 829.263037][ T29] audit: type=1400 audit(1787584341.515:5056): avc: denied { write } for pid=19366 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 829.737587][T19380] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3646'. [ 831.231912][T19400] fuse: fd is not a fuse device [ 832.107411][ T29] audit: type=1400 audit(1787584344.365:5057): avc: denied { write } for pid=19374 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.356144][ T29] audit: type=1400 audit(1787584344.615:5058): avc: denied { write } for pid=19409 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 835.841268][T19443] netlink: 'syz.5.3660': attribute type 2 has an invalid length. [ 835.924092][ T29] audit: type=1400 audit(1787584348.175:5059): avc: denied { write } for pid=19419 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 836.004286][T19445] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3660'. [ 836.022099][T19443] : entered promiscuous mode [ 836.335709][ T29] audit: type=1400 audit(1787584348.595:5060): avc: denied { write } for pid=19452 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 839.918475][T19504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3675'. [ 849.875155][T19585] vlan4: entered promiscuous mode [ 849.922857][T19585] hsr0: entered promiscuous mode [ 849.967688][T19585] vlan4: entered allmulticast mode [ 849.973159][T19595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3694'. [ 850.082737][T19585] hsr0: entered allmulticast mode [ 850.164702][T19605] fuse: fd is not a fuse device [ 850.376908][T19585] hsr_slave_0: entered allmulticast mode [ 851.151362][T14934] page_pool_release_retry() stalled pool shutdown: id 137, 47 inflight 183 sec [ 851.204534][T19585] hsr_slave_1: entered allmulticast mode [ 852.979495][ T29] audit: type=1400 audit(1787584364.765:5061): avc: denied { read } for pid=19613 comm="syz.3.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 853.689997][T19595] hsr_slave_0: left promiscuous mode [ 853.763189][T19595] hsr_slave_1: left promiscuous mode [ 854.191260][T19627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3706'. [ 855.476326][T19633] netlink: 'syz.5.3707': attribute type 1 has an invalid length. [ 855.521487][T19629] netlink: 'syz.5.3707': attribute type 1 has an invalid length. [ 858.171971][T19659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3717'. [ 858.722427][T19665] vlan4: entered promiscuous mode [ 858.750726][T19665] hsr0: entered promiscuous mode [ 858.816827][T19665] vlan4: entered allmulticast mode [ 858.839900][T19670] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3720'. [ 858.866871][T19672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3718'. [ 858.889091][T19665] hsr0: entered allmulticast mode [ 858.941518][T19665] hsr_slave_0: entered allmulticast mode [ 859.030328][T19665] hsr_slave_1: entered allmulticast mode [ 859.325732][T19672] hsr_slave_0: left promiscuous mode [ 859.542129][T19672] hsr_slave_1: left promiscuous mode [ 860.433390][ T29] audit: type=1400 audit(1787584372.685:5062): avc: denied { mount } for pid=19687 comm="syz.6.3725" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 860.741256][T19697] netlink: 'syz.6.3727': attribute type 1 has an invalid length. [ 861.218468][T19699] veth5: entered allmulticast mode [ 861.390799][T19697] 8021q: adding VLAN 0 to HW filter on device bond4 [ 861.444547][T19702] bond4: entered promiscuous mode [ 861.467967][T19702] bond4: entered allmulticast mode [ 861.511946][T19703] macvlan3: entered promiscuous mode [ 861.537957][T19703] macvlan3: entered allmulticast mode [ 861.684712][T19703] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 861.956031][T19709] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3729'. [ 862.235131][T19710] netlink: 'syz.0.3729': attribute type 15 has an invalid length. [ 862.485914][T19710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3729'. [ 862.955003][T19719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3731'. [ 862.966720][T11926] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 862.976099][T19710] netlink: 'syz.0.3729': attribute type 15 has an invalid length. [ 862.995896][T11926] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 863.015674][T19710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3729'. [ 863.028618][T11926] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 863.050945][T19721] netlink: 'syz.4.3732': attribute type 1 has an invalid length. [ 863.074932][T19721] netlink: 'syz.4.3732': attribute type 2 has an invalid length. [ 863.095645][T11933] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 863.108087][T19723] netlink: 'syz.5.3731': attribute type 10 has an invalid length. [ 863.300054][T19723] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3731'. [ 864.708856][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.720036][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 865.653236][T19743] vlan2: entered promiscuous mode [ 865.683771][T19743] hsr0: entered promiscuous mode [ 865.823768][T19743] vlan2: entered allmulticast mode [ 865.836730][T19748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3737'. [ 865.911588][T19743] hsr0: entered allmulticast mode [ 866.011498][T19743] hsr_slave_1: entered allmulticast mode [ 866.167374][T19748] hsr_slave_1: left promiscuous mode [ 868.174939][T19779] fuse: fd is not a fuse device [ 871.333798][T19803] overlayfs: failed to clone upperpath [ 871.498669][T19810] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3758'. [ 875.248904][T19829] fuse: fd is not a fuse device [ 875.352383][T19831] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19831 comm=syz.0.3763 [ 875.400093][T19833] tipc: Enabled bearer , priority 0 [ 885.154353][T19873] IPVS: Scheduler module ip_vs_ not found [ 885.231001][T19884] fuse: fd is not a fuse device [ 885.534809][T19892] fuse: fd is not a fuse device [ 889.427764][T19913] lo speed is unknown, defaulting to 1000 [ 890.290196][T19929] ecryptfs: Unknown parameter 'ecŒ|}«' [ 890.581060][T19933] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3795'. [ 890.809901][T19933] bond2: (slave dummy0): Releasing backup interface [ 890.929457][T19933] dummy0 (unregistering): left promiscuous mode [ 892.703744][T19964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3806'. [ 893.153633][T19967] netlink: 'syz.0.3808': attribute type 2 has an invalid length. [ 893.183805][T19967] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3808'. [ 893.212188][T19968] bond0 (unregistering): Released all slaves [ 893.253606][T19967] : entered promiscuous mode [ 893.424331][T19977] fuse: fd is not a fuse device [ 893.629035][T19981] tipc: Enabling of bearer rejected, failed to enable media [ 894.028913][T19994] tipc: Enabling of bearer rejected, already enabled [ 895.653080][T19999] bond3: entered promiscuous mode [ 898.429331][T19999] 8021q: adding VLAN 0 to HW filter on device bond3 [ 902.216579][ T5600] Bluetooth: hci1: unexpected event for opcode 0x200d [ 902.349754][ T29] audit: type=1400 audit(1787584414.605:5063): avc: denied { write } for pid=20030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 902.793314][ T29] audit: type=1400 audit(1787584415.045:5064): avc: denied { write } for pid=20058 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 903.891665][T20081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3836'. [ 903.973992][T20081] vlan2: left allmulticast mode [ 904.873749][T20081] geneve0: left allmulticast mode [ 904.905612][T20081] vlan2: left promiscuous mode [ 904.944437][T20081] geneve0: left promiscuous mode [ 904.976833][T20081] bridge0: port 3(vlan2) entered disabled state [ 906.020900][T20081] bridge_slave_1: left allmulticast mode [ 906.057824][T20081] bridge_slave_1: left promiscuous mode [ 906.752260][T20081] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.969757][T20081] bridge_slave_0: left allmulticast mode [ 907.002384][T20081] bridge_slave_0: left promiscuous mode [ 907.058422][T20081] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.178069][ T29] audit: type=1400 audit(1787584419.435:5065): avc: denied { write } for pid=20076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 907.471786][T17025] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 907.487542][T17025] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 907.500409][T17025] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 907.510802][T17025] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 907.520439][T17025] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 908.091967][ T29] audit: type=1400 audit(1787584420.345:5066): avc: denied { write } for pid=20110 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 910.394094][T17025] Bluetooth: hci2: command tx timeout [ 911.427716][T14934] page_pool_release_retry() stalled pool shutdown: id 137, 47 inflight 243 sec [ 912.456701][T20139] bond0: (slave bond_slave_1): Releasing backup interface [ 912.467370][T17025] Bluetooth: hci2: command tx timeout [ 913.288104][T20106] lo speed is unknown, defaulting to 1000 [ 915.250742][T17025] Bluetooth: hci2: command tx timeout [ 915.954779][T20106] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.010537][T20106] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.070835][T20106] bridge_slave_0: entered allmulticast mode [ 916.120392][T20106] bridge_slave_0: entered promiscuous mode [ 916.175713][T20106] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.418425][T20106] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.463043][T20106] bridge_slave_1: entered allmulticast mode [ 916.524935][T20106] bridge_slave_1: entered promiscuous mode [ 916.716567][T20106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.821129][T20106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.068798][T20106] team0: Port device team_slave_0 added [ 917.140493][T20106] team0: Port device team_slave_1 added [ 917.265770][T17025] Bluetooth: hci2: command tx timeout [ 917.348345][T20106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.408442][T20106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.612314][T20106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.717493][T20106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.784238][T20106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.014016][T20106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.334496][T20106] hsr_slave_0: entered promiscuous mode [ 918.417862][T20106] hsr_slave_1: entered promiscuous mode [ 918.828869][T20196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3863'. [ 920.023655][T20196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 921.476560][ T29] audit: type=1400 audit(1787584433.725:5067): avc: denied { mounton } for pid=20203 comm="syz.6.3866" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 922.262685][T20213] No such timeout policy "syz1" [ 922.913712][T20227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3871'. [ 923.248214][ T29] audit: type=1400 audit(1787584435.505:5068): avc: denied { write } for pid=20206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 923.684441][ T29] audit: type=1400 audit(1787584435.935:5069): avc: denied { write } for pid=20240 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 923.875174][T20227] team0 (unregistering): Port device team_slave_0 removed [ 923.934682][T20227] team0 (unregistering): Port device team_slave_1 removed [ 926.206702][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.217151][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.893877][ T29] audit: type=1400 audit(1787584439.145:5070): avc: denied { write } for pid=20250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 927.055295][T20267] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 927.066224][T20267] batman_adv: batadv0: Adding interface: gretap1 [ 927.072854][T20267] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 927.099424][T20267] batman_adv: batadv0: Interface activated: gretap1 [ 927.689914][ T29] audit: type=1400 audit(1787584439.935:5071): avc: denied { write } for pid=20272 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 928.008957][T20280] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3881'. [ 929.960760][T20309] netlink: 'syz.6.3888': attribute type 1 has an invalid length. [ 930.088966][T20313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20313 comm=syz.6.3888 [ 931.137127][T20309] 8021q: adding VLAN 0 to HW filter on device bond5 [ 931.203187][ T29] audit: type=1400 audit(1787584443.455:5072): avc: denied { write } for pid=20285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 931.235559][T20106] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 931.289566][T20106] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 931.549757][T20106] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 933.160777][T20106] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 933.241448][T20106] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 934.239003][ T29] audit: type=1400 audit(1787584446.495:5073): avc: denied { write } for pid=20324 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 934.547896][T20106] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 934.773132][T20106] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 935.943244][T20106] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 936.461393][T20106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.595060][T20350] netlink: 'syz.0.3896': attribute type 1 has an invalid length. [ 936.605091][T20106] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.778739][T20354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3896'. [ 937.056478][T20354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.186025][T20362] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 937.214358][T10756] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.221773][T10756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.355207][T10756] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.362652][T10756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.402039][ T29] audit: type=1400 audit(1787584449.635:5074): avc: denied { relabelto } for pid=20361 comm="syz.4.3898" name="350" dev="tmpfs" ino=1889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 937.768132][T20363] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 937.805918][ T29] audit: type=1400 audit(1787584449.695:5076): avc: denied { write } for pid=20338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 937.919727][T20106] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 938.017535][T20106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 938.034346][ T29] audit: type=1400 audit(1787584449.635:5075): avc: denied { associate } for pid=20361 comm="syz.4.3898" name="350" dev="tmpfs" ino=1889 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 939.203070][ T29] audit: type=1400 audit(1787584449.745:5077): avc: denied { write } for pid=20361 comm="syz.4.3898" name="350" dev="tmpfs" ino=1889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 939.829547][T20381] o2cb: This node has not been configured. [ 939.835825][T20381] o2cb: Cluster check failed. Fix errors before retrying. [ 939.843278][T20381] (syz.6.3893,20381,0):user_dlm_register:674 ERROR: status = -22 [ 939.851349][T20381] (syz.6.3893,20381,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 940.082298][ T29] audit: type=1400 audit(1787584449.745:5078): avc: denied { add_name } for pid=20361 comm="syz.4.3898" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 940.615490][T20391] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3900'. [ 940.698258][ T29] audit: type=1400 audit(1787584449.745:5079): avc: denied { create } for pid=20361 comm="syz.4.3898" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 941.724010][ T29] audit: type=1400 audit(1787584449.745:5080): avc: denied { associate } for pid=20361 comm="syz.4.3898" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 944.092545][ T29] audit: type=1400 audit(1787584450.025:5081): avc: denied { mounton } for pid=20361 comm="syz.4.3898" path="/350" dev="tmpfs" ino=1889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 944.420881][ T29] audit: type=1400 audit(1787584450.355:5082): avc: denied { write } for pid=20369 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 944.676847][ T29] audit: type=1400 audit(1787584452.085:5083): avc: denied { write } for pid=20373 comm="syz.6.3893" name="/" dev="ocfs2_dlmfs" ino=67331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 944.923917][T20106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.970744][ T29] audit: type=1400 audit(1787584452.085:5084): avc: denied { add_name } for pid=20373 comm="syz.6.3893" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 945.226229][ T29] audit: type=1400 audit(1787584452.085:5085): avc: denied { create } for pid=20373 comm="syz.6.3893" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 945.330691][T20106] veth0_vlan: entered promiscuous mode [ 945.419910][T20106] veth1_vlan: entered promiscuous mode [ 945.459016][ T29] audit: type=1400 audit(1787584452.085:5086): avc: denied { associate } for pid=20373 comm="syz.6.3893" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 945.692198][T20106] veth0_macvtap: entered promiscuous mode [ 945.732678][ T29] audit: type=1400 audit(1787584453.045:5087): avc: denied { remove_name } for pid=12880 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 945.881437][T20106] veth1_macvtap: entered promiscuous mode [ 945.942544][T20106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 946.499660][T20106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.668445][T20432] bridge: RTM_NEWNEIGH with invalid ether address [ 946.711550][ T29] audit: type=1400 audit(1787584453.045:5088): avc: denied { unlink } for pid=12880 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1894 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 946.916172][T11925] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.465915][T10756] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.522006][T10756] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.629864][ T29] audit: type=1400 audit(1787584453.065:5089): avc: denied { rmdir } for pid=12880 comm="syz-executor" name="350" dev="tmpfs" ino=1889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 947.678859][T10756] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.880770][T20456] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3912'. [ 948.104522][T20463] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3912'. [ 948.180257][ T29] audit: type=1400 audit(1787584456.675:5090): avc: denied { write } for pid=20384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 948.257873][T20456] 9p: Bad value for 'rfdno' [ 949.053343][ T29] audit: type=1400 audit(1787584457.305:5091): avc: denied { write } for pid=20425 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 949.102264][T11928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.120760][T20463] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3912'. [ 949.204370][T11928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.663272][T17025] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 949.863873][ T29] audit: type=1400 audit(1787584458.115:5092): avc: denied { ioctl } for pid=20430 comm="syz.3.3907" path="socket:[67485]" dev="sockfs" ino=67485 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 949.965855][T11928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.168120][T11928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.262678][ T29] audit: type=1400 audit(1787584461.675:5093): avc: denied { write } for pid=20429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 950.475818][ T29] audit: type=1400 audit(1787584462.565:5094): avc: denied { mounton } for pid=20106 comm="syz-executor" path="/root/syzkaller.9MRc5N/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 951.130862][ T29] audit: type=1400 audit(1787584462.675:5095): avc: denied { write } for pid=20485 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 953.041097][T20501] netlink: 'syz.3.3918': attribute type 1 has an invalid length. [ 953.395918][T20501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.892495][ T29] audit: type=1400 audit(1787584466.145:5096): avc: denied { write } for pid=20494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.273128][ T29] audit: type=1326 audit(1787584466.185:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.6.3922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 954.731185][ T29] audit: type=1326 audit(1787584466.185:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.6.3922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 955.080316][ T29] audit: type=1326 audit(1787584466.205:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.6.3922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 955.254148][T20540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3925'. [ 955.286340][ T29] audit: type=1326 audit(1787584466.205:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.6.3922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 955.561687][ T29] audit: type=1326 audit(1787584466.225:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.6.3922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 955.780425][ T29] audit: type=1326 audit(1787584466.285:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.6.3922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 955.994868][ T29] audit: type=1326 audit(1787584466.285:5103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.6.3922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 956.293789][ T29] audit: type=1326 audit(1787584466.295:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20521 comm="syz.6.3922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3aadb5e90e code=0x7ffc0000 [ 956.418119][ T29] audit: type=1326 audit(1787584466.495:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20521 comm="syz.6.3922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 956.615178][ T29] audit: type=1326 audit(1787584466.875:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.6.3922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 956.890731][ T29] audit: type=1326 audit(1787584466.875:5107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.6.3922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 957.048250][T20572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3930'. [ 957.073479][ T29] audit: type=1326 audit(1787584466.895:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.6.3922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 957.239563][ T29] audit: type=1326 audit(1787584466.895:5109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20516 comm="syz.6.3922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aadb9e0d9 code=0x7ffc0000 [ 957.792351][ T9] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 957.999705][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 958.086939][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.108245][ T9] usb 2-1: Product: syz [ 958.142998][ T9] usb 2-1: Manufacturer: syz [ 958.173259][ T9] usb 2-1: SerialNumber: syz [ 958.244823][ T9] usb 2-1: config 0 descriptor?? [ 959.353646][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 960.628997][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 960.629018][ T29] audit: type=1400 audit(1787584472.885:5213): avc: denied { write } for pid=20591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 961.491151][ T29] audit: type=1400 audit(1787584473.745:5214): avc: denied { write } for pid=20623 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 961.545340][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 961.602992][ T9] usb 2-1: USB disconnect, device number 8 [ 963.804708][T20635] netlink: 'syz.6.3942': attribute type 2 has an invalid length. [ 964.034542][T20635] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3942'. [ 964.289508][T20643] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3943'. [ 964.839708][T20635] : entered promiscuous mode [ 966.737648][T20664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3946'. [ 967.375599][ T29] audit: type=1400 audit(1787584479.625:5215): avc: denied { write } for pid=20631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 968.361357][ T9153] erspan0: left allmulticast mode [ 968.419860][ T9153] erspan0: left promiscuous mode [ 969.178170][ T9153] bridge3: port 1(erspan0) entered disabled state [ 969.438504][ T9153] pim6reg: left allmulticast mode [ 969.863816][ T29] audit: type=1400 audit(1787584482.115:5216): avc: denied { write } for pid=20685 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 970.348906][ T9153] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 971.205823][T20693] net_ratelimit: 3255 callbacks suppressed [ 971.205864][T20693] ip_tables: iptables: counters copy to user failed while replacing table [ 972.537534][T20466] page_pool_release_retry() stalled pool shutdown: id 137, 47 inflight 304 sec [ 974.419067][T20716] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 974.961791][T20716] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 974.978578][T20716] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 974.991459][T20716] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 975.009067][T20716] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 975.107130][ T9153] bond3 (unregistering): (slave gretap2): Removing an active aggregator [ 975.202818][ T9153] bond3 (unregistering): (slave gretap2): Releasing backup interface [ 975.723412][T20729] CIFS: Attempting to mount //127.0.0.1/share [ 975.869631][ T9153] bond5 (unregistering): (slave gretap3): Releasing backup interface [ 976.030322][T20729] CIFS: VFS: Error connecting to socket. Aborting operation. [ 976.038113][T20729] CIFS: VFS: cifs_mount failed w/return code = -4 [ 976.196818][T20734] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 976.225288][ T9153] bond2 (unregistering): (slave geneve2): Releasing active interface [ 976.266557][ T29] audit: type=1400 audit(1787584488.515:5217): avc: denied { write } for pid=20699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 976.622294][ T9153] bond0 (unregistering): Released all slaves [ 976.649373][ T29] audit: type=1400 audit(1787584488.905:5218): avc: denied { write } for pid=20741 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 976.719157][T20734] rtrs_client L2095: : Failed to resolve address, err: -ENODEV [ 976.734958][ T9153] bond1 (unregistering): Released all slaves [ 976.757499][T10756] smbdirect: ib_dev[syz1] removed [ 976.899290][ T9153] bond2 (unregistering): Released all slaves [ 977.006338][T20734] rtrs_client L2636: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 977.050624][ T9153] bond3 (unregistering): Released all slaves [ 977.106455][T20716] Bluetooth: hci3: command tx timeout [ 977.186602][ T9153] bond4 (unregistering): Released all slaves [ 977.305007][ T9153] bond5 (unregistering): (slave bond6): Releasing backup interface [ 977.367987][ T9153] bond5 (unregistering): Released all slaves [ 977.450522][ T9153] bond6 (unregistering): Released all slaves [ 977.538517][ T9153] bond7 (unregistering): Released all slaves [ 977.687397][ T9153] tipc: Disabling bearer [ 977.745844][ T9153] syzkaller0 (unregistering): Released all slaves [ 977.887192][T20673] bridge1: port 1(erspan0) entered blocking state [ 977.959147][T20673] bridge1: port 1(erspan0) entered disabled state [ 978.010982][T20673] erspan0: entered allmulticast mode [ 978.069942][T20673] erspan0: entered promiscuous mode [ 978.153944][ T9153] : left promiscuous mode [ 979.186545][T20716] Bluetooth: hci3: command tx timeout [ 979.610293][ T9153] tipc: Left network mode [ 979.729294][ T29] audit: type=1326 audit(1787584491.985:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20772 comm="syz.6.3966" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3aadb9e0d9 code=0x0 [ 979.887245][T20778] fuse: fd is not a fuse device [ 981.944245][T20716] Bluetooth: hci3: command tx timeout [ 982.923928][ T29] audit: type=1400 audit(1787584495.165:5220): avc: denied { write } for pid=20759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 984.053516][T20716] Bluetooth: hci3: command tx timeout [ 985.508661][ T29] audit: type=1400 audit(1787584497.765:5221): avc: denied { write } for pid=20807 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 985.552778][T20812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3974'. [ 987.588180][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.599339][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 988.114390][ T29] audit: type=1400 audit(1787584500.365:5222): avc: denied { write } for pid=20820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 988.228004][T20712] lo speed is unknown, defaulting to 1000 [ 988.817674][ T29] audit: type=1400 audit(1787584501.075:5223): avc: denied { write } for pid=20844 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 988.849063][ T9153] IPVS: stop unused estimator thread 0... [ 989.814842][ T29] audit: type=1400 audit(1787584502.065:5224): avc: denied { write } for pid=20865 comm="syz.1.3983" name="functions" dev="configfs" ino=32860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 990.128400][ T29] audit: type=1400 audit(1787584502.245:5225): avc: denied { write } for pid=20865 comm="syz.1.3983" name="extensions" dev="configfs" ino=69223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 991.140073][T20712] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.199069][T20712] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.249656][T20712] bridge_slave_0: entered allmulticast mode [ 991.296641][T20712] bridge_slave_0: entered promiscuous mode [ 991.341593][T20712] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.410497][T20712] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.512686][ T29] audit: type=1400 audit(1787584503.755:5226): avc: denied { write } for pid=20860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 991.593500][T20712] bridge_slave_1: entered allmulticast mode [ 991.640798][T20712] bridge_slave_1: entered promiscuous mode [ 991.852876][T20712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.951341][ T29] audit: type=1400 audit(1787584504.205:5227): avc: denied { write } for pid=20912 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 991.998814][T20712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.227094][T20712] team0: Port device team_slave_0 added [ 992.302108][T20712] team0: Port device team_slave_1 added [ 992.464510][T20712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.528266][T20712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.712885][T20712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.784789][T20712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.845300][T20919] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 992.872389][T20712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.985648][T20924] netlink: 'syz.3.3994': attribute type 1 has an invalid length. [ 994.124510][T20712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.322113][T20929] macvtap1: entered allmulticast mode [ 994.407137][T20930] bond6: (slave bridge1): making interface the new active one [ 994.460757][T20930] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 994.788241][T20712] hsr_slave_0: entered promiscuous mode [ 994.831752][T20712] hsr_slave_1: entered promiscuous mode [ 994.874486][T20712] debugfs: 'hsr0' already exists in 'hsr' [ 994.917490][T20712] Cannot create hsr debugfs directory [ 995.259230][ T9153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 996.458168][T20966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 996.984852][ T29] audit: type=1400 audit(1787584509.235:5228): avc: denied { write } for pid=20946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 997.051898][ T9153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 997.180574][ T29] audit: type=1400 audit(1787584509.385:5229): avc: denied { setopt } for pid=20978 comm="syz.1.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 997.250592][ T9153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 997.324666][ T29] audit: type=1400 audit(1787584509.575:5230): avc: denied { write } for pid=20980 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 997.391703][T20979] tipc: Started in network mode [ 997.437972][T20979] tipc: Node identity 7f000001, cluster identity 4711 [ 997.486983][T20979] tipc: New replicast peer: 127.0.0.2 [ 997.526065][T20979] tipc: Enabled bearer , priority 10 [ 997.602318][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 997.739949][ T9153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 998.087801][T20996] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 998.488526][T21003] netlink: 'syz.3.4009': attribute type 1 has an invalid length. [ 1000.897167][T21003] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1001.080405][T20657] tipc: Node number set to 2130706433 [ 1002.998387][ T29] audit: type=1400 audit(1787584515.255:5231): avc: denied { write } for pid=21008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1003.375942][ T29] audit: type=1400 audit(1787584515.625:5232): avc: denied { write } for pid=21053 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1004.850851][T21063] netlink: NAT attribute has 4 unknown bytes [ 1004.897696][T21065] netlink: 'syz.1.4019': attribute type 1 has an invalid length. [ 1004.907273][T21063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1005.016401][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1005.149935][T21073] netlink: 'syz.3.4020': attribute type 1 has an invalid length. [ 1005.187780][T21065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1005.239037][T21067] macvlan2: entered promiscuous mode [ 1005.262143][T21067] macvlan2: entered allmulticast mode [ 1005.282607][T21067] bond1: entered allmulticast mode [ 1005.301817][T21067] bond1: entered promiscuous mode [ 1005.317530][T21067] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1005.349849][T21067] team0: Port device macvlan2 added [ 1005.392580][T21068] bond1: (slave ip6gretap1): making interface the new active one [ 1005.420807][T21068] ip6gretap1: entered promiscuous mode [ 1005.439923][T21068] ip6gretap1: entered allmulticast mode [ 1006.273610][T21068] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1007.882890][ T9153] bridge_slave_1: left allmulticast mode [ 1008.037913][ T9153] bridge_slave_1: left promiscuous mode [ 1008.066138][ T9153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.104413][ T9153] bridge_slave_0: left allmulticast mode [ 1009.126859][ T9153] bridge_slave_0: left promiscuous mode [ 1009.139063][ T9153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.233800][ T9153] pim6reg: left allmulticast mode [ 1010.351305][ T9153] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 1010.375267][ T29] audit: type=1400 audit(1787584522.625:5233): avc: denied { bind } for pid=21103 comm="syz.1.4029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1011.479801][ T29] audit: type=1400 audit(1787584523.005:5234): avc: denied { write } for pid=21103 comm="syz.1.4029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1011.702698][ T9153] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 1011.790204][ T9153] bond7 (unregistering): (slave geneve3): Releasing active interface [ 1011.819804][ T9153] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1011.841902][ T9153] geneve2 (unregistering): left allmulticast mode [ 1011.863595][T21117] xt_nfacct: accounting object `syz0' does not exist [ 1011.891040][T21113] openvswitch: netlink: IP tunnel dst address not specified [ 1011.980141][ T9153] bond6 (unregistering): (slave bridge2): Releasing backup interface [ 1012.049476][T21122] netlink: 'syz.1.4034': attribute type 1 has an invalid length. [ 1012.060636][ T9153] bond1 (unregistering): Released all slaves [ 1012.073189][ T9153] bond2 (unregistering): Released all slaves [ 1012.091658][ T9153] bond3 (unregistering): Released all slaves [ 1012.121465][ T9153] bond4 (unregistering): Released all slaves [ 1012.150688][ T9153] bond5 (unregistering): Released all slaves [ 1012.168989][ T9153] bond6 (unregistering): Released all slaves [ 1012.182899][ T9153] bond7 (unregistering): Released all slaves [ 1012.198693][ T9153] bond8 (unregistering): (slave bond9): Releasing backup interface [ 1012.208618][ T9153] bond8 (unregistering): Released all slaves [ 1012.226852][ T9153] bond9 (unregistering): Released all slaves [ 1012.256433][ T9153] syzkaller0 (unregistering): Released all slaves [ 1012.271808][ T9153] bond10 (unregistering): Released all slaves [ 1012.287648][ T9153] bond0 (unregistering): Released all slaves [ 1012.311606][T21097] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4022'. [ 1012.394291][T21120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4033'. [ 1013.344065][T21122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1013.535877][T21123] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1013.744066][T21123] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 1013.787686][T21123] bond2: (slave vti0): Error -95 calling set_mac_address [ 1013.808244][ T29] audit: type=1400 audit(1787584526.055:5235): avc: denied { create } for pid=21136 comm="syz.6.4039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1013.889810][T21125] gretap1: entered promiscuous mode [ 1013.928032][T21125] bond2: (slave gretap1): making interface the new active one [ 1013.961473][T21125] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1014.014812][T21126] macvlan3: entered promiscuous mode [ 1014.036633][T21126] macvlan3: entered allmulticast mode [ 1014.058217][T21126] bond2: entered promiscuous mode [ 1014.070338][T21126] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1014.090767][T21126] bond2: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1014.114069][T21126] bond2: left promiscuous mode [ 1014.142490][ T9153] : left promiscuous mode [ 1014.340101][ T9153] tipc: Left network mode [ 1016.110992][T20712] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1016.325791][T20712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1016.553434][T20712] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1016.617342][ T29] audit: type=1400 audit(1787584528.865:5236): avc: denied { write } for pid=21143 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1016.646841][T20712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1016.731365][T20712] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1016.791773][T20712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1016.837731][T20712] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1016.885806][T20712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1016.921270][ T29] audit: type=1400 audit(1787584529.175:5237): avc: denied { write } for pid=21168 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1017.221956][T21174] xt_hashlimit: size too large, truncated to 1048576 [ 1017.274473][T21164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1017.339877][T21164] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1017.381753][T21178] netlink: 'syz.3.4046': attribute type 27 has an invalid length. [ 1017.400214][T21164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1017.489193][T21164] veth1_vlan: left promiscuous mode [ 1017.520871][T21164] veth0_vlan: left promiscuous mode [ 1017.554589][T21164] veth0_vlan: entered promiscuous mode [ 1017.598760][T21164] veth1_vlan: entered promiscuous mode [ 1017.648019][T21164] veth1_macvtap: left promiscuous mode [ 1017.671500][T21164] veth0_macvtap: left promiscuous mode [ 1017.699737][T21164] veth0_macvtap: entered promiscuous mode [ 1017.732815][T21164] veth1_macvtap: entered promiscuous mode [ 1017.793668][T21164] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1017.820170][T21164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1017.843568][ T29] audit: type=1400 audit(1787584530.095:5238): avc: denied { read write } for pid=21179 comm="syz.1.4043" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1017.877678][T21164] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1017.888554][T21164] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1017.909724][T21164] mac80211_hwsim hwsim28 wlan1: left promiscuous mode [ 1017.922585][ T29] audit: type=1400 audit(1787584530.095:5239): avc: denied { open } for pid=21179 comm="syz.1.4043" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1018.008776][T21164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1018.171495][T21164] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1018.502731][ T5259] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1018.555214][T21192] fuse: fd is not a fuse device [ 1018.688952][T11922] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1018.741983][T11922] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.791465][ T9153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.913417][ T9153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.182968][ T29] audit: type=1400 audit(1787584533.435:5240): avc: denied { read } for pid=21215 comm="syz.4.4054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1021.283074][T12162] smbdirect: ib_dev[syz2] removed [ 1021.335307][ T29] audit: type=1400 audit(1787584533.435:5241): avc: denied { bind } for pid=21215 comm="syz.4.4054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1021.376392][T11925] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.278217][T11925] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.795558][T11933] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.860796][T11933] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.899735][T21238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4059'. [ 1023.061897][T11926] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.089932][T21238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4059'. [ 1023.104669][ T9153] IPVS: stop unused estimator thread 0... [ 1023.298606][T11926] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.789852][T20712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.809478][T20712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.913559][T11928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.920678][T11928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.111776][T12163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.118890][T12163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.182558][T21275] netlink: Unknown conntrack attr (0) [ 1027.189267][T21275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1027.285075][ T29] audit: type=1400 audit(1787584539.535:5242): avc: denied { write } for pid=21234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1028.095974][T21287] overlayfs: failed to clone upperpath [ 1028.718666][ T29] audit: type=1400 audit(1787584540.965:5243): avc: denied { write } for pid=21285 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.212819][T21294] bridge1: port 1(erspan0) entered blocking state [ 1029.219330][T21294] bridge1: port 1(erspan0) entered forwarding state [ 1029.431691][T21294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.846840][T21294] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.047528][T21294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.423953][T21294] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1030.479994][T21294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1030.536590][T21294] veth1_vlan: left promiscuous mode [ 1030.558406][T21294] veth0_vlan: left promiscuous mode [ 1030.598179][T21294] veth0_vlan: entered promiscuous mode [ 1030.625216][T21294] veth1_vlan: entered promiscuous mode [ 1030.631509][T17025] Bluetooth: hci2: command 0x0406 tx timeout [ 1031.831244][T21294] veth1_macvtap: left promiscuous mode [ 1031.859942][T21294] veth0_macvtap: left promiscuous mode [ 1031.878004][T21294] veth0_macvtap: entered promiscuous mode [ 1031.895797][T21294] veth1_macvtap: entered promiscuous mode [ 1031.931900][T21294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1031.949661][T21294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1031.959795][ T29] audit: type=1400 audit(1787584544.215:5244): avc: denied { connect } for pid=21330 comm="syz.1.4079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1032.094638][T21294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1032.110830][T21294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1032.119383][T21294] mac80211_hwsim hwsim30 wlan0: left promiscuous mode [ 1032.130972][T21294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1032.138832][T21294] virt_wifi0: entered promiscuous mode [ 1032.303371][T21333] SET target dimension over the limit! [ 1032.326580][T21294] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1032.336452][T21294] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1032.344912][T21294] bridge0: port 3(macvlan2) entered blocking state [ 1032.351465][T21294] bridge0: port 3(macvlan2) entered forwarding state [ 1032.359119][T21294] erspan1: left allmulticast mode [ 1032.365143][T21294] bond4: left promiscuous mode [ 1032.389405][T21294] bond4: left allmulticast mode [ 1032.394521][T21294] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1032.456346][ T5259] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1032.555730][T11926] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.703227][T20657] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1032.965617][ T5797] page_pool_release_retry() stalled pool shutdown: id 137, 47 inflight 365 sec [ 1033.096896][T12165] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.115806][T20657] usb 2-1: Using ep0 maxpacket: 32 [ 1033.142066][T20657] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1033.817353][T12165] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.862831][T20657] usb 2-1: New USB device found, idVendor=0068, idProduct=0103, bcdDevice=40.ee [ 1033.915605][T11925] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.961200][T20657] usb 2-1: no configurations [ 1033.986782][T20657] usb 2-1: can't read configurations, error -22 [ 1034.064292][T17025] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1034.080421][T17025] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1034.088289][T17025] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1034.101419][T17025] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1034.116254][T17025] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1034.165340][T20657] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1034.365737][T20657] usb 2-1: Using ep0 maxpacket: 32 [ 1034.398839][T20657] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1034.453307][T20657] usb 2-1: New USB device found, idVendor=0068, idProduct=0103, bcdDevice=40.ee [ 1034.563729][T20657] usb 2-1: no configurations [ 1034.600078][T20657] usb 2-1: can't read configurations, error -22 [ 1034.644473][T20657] usb usb2-port1: attempt power cycle [ 1035.023679][ T29] audit: type=1400 audit(1787584547.275:5245): avc: denied { write } for pid=21349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1036.235533][T17025] Bluetooth: hci4: command tx timeout [ 1037.144656][T21379] overlayfs: failed to clone upperpath [ 1037.213889][ T29] audit: type=1400 audit(1787584549.465:5246): avc: denied { write } for pid=21376 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1037.522060][ T5259] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1037.569156][T21386] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4089'. [ 1038.306960][T17025] Bluetooth: hci4: command tx timeout [ 1038.730841][ T29] audit: type=1400 audit(1787584550.985:5247): avc: denied { write } for pid=21391 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1038.940199][T21415] syz_tun: entered promiscuous mode [ 1039.061063][T21421] Bluetooth: MGMT ver 1.23 [ 1039.091727][T21416] [ 1039.094045][T21416] ============================================ [ 1039.100157][T21416] WARNING: possible recursive locking detected [ 1039.106273][T21416] syzkaller #0 Tainted: G L [ 1039.112213][T21416] -------------------------------------------- [ 1039.118324][T21416] syz.1.4087/21416 is trying to acquire lock: [ 1039.124353][T21416] ffff88807ea5a160 (&rmidi->open_mutex){+.+.}-{4:4}, at: rawmidi_release_priv+0x45/0x280 [ 1039.134157][T21416] [ 1039.134157][T21416] but task is already holding lock: [ 1039.141484][T21416] ffff88805490fd60 (&rmidi->open_mutex){+.+.}-{4:4}, at: rawmidi_release_priv+0x45/0x280 [ 1039.151274][T21416] [ 1039.151274][T21416] other info that might help us debug this: [ 1039.159299][T21416] Possible unsafe locking scenario: [ 1039.159299][T21416] [ 1039.166718][T21416] CPU0 [ 1039.169965][T21416] ---- [ 1039.173212][T21416] lock(&rmidi->open_mutex); [ 1039.177853][T21416] lock(&rmidi->open_mutex); [ 1039.182493][T21416] [ 1039.182493][T21416] *** DEADLOCK *** [ 1039.182493][T21416] [ 1039.190600][T21416] May be due to missing lock nesting notation [ 1039.190600][T21416] [ 1039.198879][T21416] locks held by syz.1.4087/21416: 2, last CPU#0: [ 1039.205168][T21416] #0: ffff88805490fd60 (&rmidi->open_mutex){+.+.}-{4:4}, at: rawmidi_release_priv+0x45/0x280 [ 1039.215393][T21416] #1: ffff88807ea5a460 (&ump->open_mutex){+.+.}-{4:4}, at: snd_ump_legacy_close+0x117/0x300 [ 1039.225535][T21416] [ 1039.225535][T21416] stack backtrace: [ 1039.231410][T21416] CPU: 0 UID: 0 PID: 21416 Comm: syz.1.4087 Tainted: G L syzkaller #0 PREEMPT(full) [ 1039.231426][T21416] Tainted: [L]=SOFTLOCKUP [ 1039.231429][T21416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1039.231439][T21416] Call Trace: [ 1039.231443][T21416] [ 1039.231448][T21416] dump_stack_lvl+0x100/0x190 [ 1039.231464][T21416] print_deadlock_bug.cold+0xbd/0xca [ 1039.231481][T21416] __lock_acquire+0x1343/0x1ec0 [ 1039.231501][T21416] lock_acquire+0x1b9/0x370 [ 1039.231516][T21416] ? rawmidi_release_priv+0x45/0x280 [ 1039.231532][T21416] ? __pfx___might_resched+0x10/0x10 [ 1039.231548][T21416] ? lock_acquire+0x1b9/0x370 [ 1039.231564][T21416] __mutex_lock+0x1a4/0x1bc0 [ 1039.231578][T21416] ? rawmidi_release_priv+0x45/0x280 [ 1039.231593][T21416] ? rawmidi_release_priv+0x45/0x280 [ 1039.231607][T21416] ? trace_contention_end+0x126/0x160 [ 1039.231618][T21416] ? __pfx___mutex_lock+0x10/0x10 [ 1039.231631][T21416] ? __pfx___mutex_lock+0x10/0x10 [ 1039.231644][T21416] ? lock_acquire+0x1b9/0x370 [ 1039.231665][T21416] ? rawmidi_release_priv+0x45/0x280 [ 1039.231680][T21416] rawmidi_release_priv+0x45/0x280 [ 1039.231696][T21416] snd_rawmidi_kernel_release+0x3a/0xd0 [ 1039.231711][T21416] snd_ump_legacy_close+0x234/0x300 [ 1039.231729][T21416] close_substream.part.0+0x16b/0x860 [ 1039.231745][T21416] ? __pfx_close_substream.part.0+0x10/0x10 [ 1039.231761][T21416] ? locks_remove_file+0xd1/0x600 [ 1039.231776][T21416] rawmidi_release_priv+0x210/0x280 [ 1039.231792][T21416] snd_rawmidi_release+0x5a/0xf0 [ 1039.231807][T21416] ? __pfx_snd_rawmidi_release+0x10/0x10 [ 1039.231822][T21416] __fput+0x3ff/0xb50 [ 1039.231835][T21416] task_work_run+0x150/0x240 [ 1039.231849][T21416] ? __pfx_task_work_run+0x10/0x10 [ 1039.231865][T21416] exit_to_user_mode_loop+0x1d8/0x700 [ 1039.231876][T21416] ? rcu_is_watching+0x13/0xc0 [ 1039.231889][T21416] do_syscall_64+0x661/0x790 [ 1039.231902][T21416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.231913][T21416] RIP: 0033:0x7f7ce3f9e0d9 [ 1039.231923][T21416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.231933][T21416] RSP: 002b:00007fff39b53498 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1039.231946][T21416] RAX: 0000000000000000 RBX: 00007f7ce4227da0 RCX: 00007f7ce3f9e0d9 [ 1039.231954][T21416] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1039.231960][T21416] RBP: 00007f7ce4227da0 R08: 00007f7ce4226038 R09: 0000000000000000 [ 1039.231967][T21416] R10: 00000000005ee41c R11: 0000000000000246 R12: 00000000000fdd6a [ 1039.231973][T21416] R13: 00007f7ce422609c R14: 00000000000fdaf2 R15: 00007f7ce4226090 [ 1039.231984][T21416] [ 1039.495814][T21413] syz_tun: left promiscuous mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1040.169247][ T29] audit: type=1400 audit(1787584552.195:5248): avc: denied { write } for pid=21422 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1040.305283][T21352] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 1040.496527][T17025] Bluetooth: hci4: command tx timeout [ 1040.647701][T12165] bridge_slave_1: left allmulticast mode [ 1040.666727][T12165] bridge_slave_1: left promiscuous mode [ 1040.679071][T12165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.751381][T12165] bridge_slave_0: left allmulticast mode [ 1040.780113][T12165] bridge_slave_0: left promiscuous mode [ 1040.805524][T12165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.002325][T12165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1041.024938][T12165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1041.043621][ T29] audit: type=1400 audit(1787584553.295:5249): avc: denied { write } for pid=21428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1041.078505][T12165] bond0 (unregistering): Released all slaves [ 1041.170518][T12165] hsr_slave_0: left promiscuous mode [ 1041.185054][T12165] hsr_slave_1: left promiscuous mode [ 1041.217833][T12165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.247846][T12165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1041.258058][ T29] audit: type=1400 audit(1787584553.515:5250): avc: denied { write } for pid=21440 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1041.423878][T12165] team0 (unregistering): Port device team_slave_1 removed [ 1041.447694][T12165] team0 (unregistering): Port device team_slave_0 removed [ 1041.583769][ T29] audit: type=1400 audit(1787584553.835:5251): avc: denied { write } for pid=21442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1041.700529][T12165] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.739951][ T29] audit: type=1400 audit(1787584553.965:5252): avc: denied { write } for pid=21453 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1041.823481][T12165] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.888564][T12165] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.943975][T12165] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.079764][T12165] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.108646][T12165] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.162856][T12165] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.187815][T12165] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.202889][ T29] audit: type=1400 audit(1787584554.455:5253): avc: denied { write } for pid=21461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1042.261407][ T29] audit: type=1400 audit(1787584554.515:5254): avc: denied { write } for pid=21472 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1042.299113][T12165] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.328882][T12165] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.344291][ T5259] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1042.366404][T12165] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.377239][T12165] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.563353][ T29] audit: type=1400 audit(1787584554.815:5255): avc: denied { write } for pid=21474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1042.630934][T12165] macvlan2: left allmulticast mode [ 1042.648782][T12165] ip6gretap0: left allmulticast mode [ 1042.662542][T12165] macvlan2: left promiscuous mode [ 1042.671733][ T29] audit: type=1400 audit(1787584554.925:5256): avc: denied { write } for pid=21485 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1042.695766][T12165] bridge0: port 3(macvlan2) entered disabled state [ 1042.705082][T12165] erspan0: left allmulticast mode [ 1042.715902][T12165] erspan0: left promiscuous mode [ 1042.726616][T12165] bridge1: port 1(erspan0) entered disabled state [ 1042.761361][T12165] batman_adv: batadv0: Interface deactivated: gretap1 [ 1042.850705][T12165] bond0 (unregistering): Released all slaves [ 1042.970846][ T29] audit: type=1400 audit(1787584555.225:5257): avc: denied { write } for pid=21487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.015883][T12165] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1043.039157][T12165] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1043.062381][T12165] bond0 (unregistering): Released all slaves [ 1043.081625][T12165] bond1 (unregistering): Released all slaves [ 1043.100527][T12165] bond2 (unregistering): Released all slaves [ 1043.129711][T12165] bond3 (unregistering): Released all slaves [ 1043.149017][T12165] bond4 (unregistering): Released all slaves [ 1043.167133][T12165] bond5 (unregistering): Released all slaves [ 1043.293357][T12165] batman_adv: batadv0: Removing interface: gretap1 [ 1043.357490][T12165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1043.377124][T12165] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1043.391874][T12165] bond0 (unregistering): Released all slaves [ 1043.410234][T12165] bond1 (unregistering): Released all slaves [ 1043.428436][T12165] syzkaller0 (unregistering): Released all slaves [ 1043.450133][T12165] bond2 (unregistering): (slave wlan1): Releasing active interface [ 1043.463682][T12165] bond2 (unregistering): Released all slaves [ 1043.502507][T12165] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 1043.517689][T12165] xfrm0 (unregistering): left allmulticast mode [ 1043.524106][T12165] team0: Port device xfrm0 removed [ 1043.556864][T12165] bond5 (unregistering): (slave geneve3): Releasing active interface [ 1043.567820][T12165] bond4 (unregistering): (slave geneve2): Releasing active interface [ 1043.581918][T12165] bond6 (unregistering): (slave bridge1): Releasing active interface [ 1043.592851][T12165] bond1 (unregistering): Released all slaves [ 1043.603486][T12165] bond3 (unregistering): Released all slaves [ 1043.612067][T12165] bond2 (unregistering): Released all slaves [ 1043.623579][T12165] bond4 (unregistering): Released all slaves [ 1043.633395][T12165] bond5 (unregistering): Released all slaves [ 1043.643420][T12165] bond0 (unregistering): Released all slaves [ 1043.655265][T12165] bond6 (unregistering): Released all slaves [ 1043.664687][T12165] bond7 (unregistering): Released all slaves [ 1043.756480][T12165] : left promiscuous mode [ 1043.797628][T12165] tipc: Disabling bearer [ 1043.813876][T12165] tipc: Left network mode [ 1043.836835][T12165] tipc: Disabling bearer [ 1043.842168][T12165] tipc: Left network mode [ 1044.060725][T12165] hsr_slave_0: left promiscuous mode [ 1044.080970][T12165] hsr_slave_1: left promiscuous mode [ 1044.107033][T12165] hsr_slave_0: left promiscuous mode [ 1044.125291][T12165] hsr_slave_1: left promiscuous mode [ 1044.140895][T12165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1044.167220][T12165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.197135][T12165] virt_wifi0: left promiscuous mode [ 1044.209738][T12165] veth1_macvtap: left promiscuous mode [ 1044.224794][T12165] veth0_macvtap: left promiscuous mode [ 1044.237825][T12165] veth1_vlan: left promiscuous mode [ 1044.250641][T12165] veth0_vlan: left promiscuous mode [ 1044.256749][T12165] veth1_macvtap: left promiscuous mode [ 1044.269070][T12165] veth0_macvtap: left promiscuous mode [ 1044.282746][T12165] veth1_vlan: left promiscuous mode [ 1044.294848][T12165] veth0_vlan: left promiscuous mode [ 1044.700737][ T5259] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1044.984410][T12165] IPVS: stop unused estimator thread 0... [ 1045.008566][T12165] IPVS: stop unused estimator thread 0... [ 1045.035902][T12165] IPVS: stop unused estimator thread 0... [ 1045.188123][T12165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.247550][T12165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.307325][T12165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.329824][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1045.329834][ T29] audit: type=1400 audit(1787584557.585:5265): avc: denied { write } for pid=21540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1045.381061][T12165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.434582][ T29] audit: type=1400 audit(1787584557.655:5266): avc: denied { write } for pid=21551 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1045.479134][T12165] bridge_slave_1: left allmulticast mode [ 1045.491942][T12165] bridge_slave_1: left promiscuous mode [ 1045.506951][T12165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.520405][T12165] bridge_slave_0: left allmulticast mode [ 1045.533919][T12165] bridge_slave_0: left promiscuous mode [ 1045.545924][T12165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.602595][T12165] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1045.620461][T12165] ip6gretap1 (unregistering): left allmulticast mode [ 1045.660717][T12165] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1045.683541][ T29] audit: type=1400 audit(1787584557.935:5267): avc: denied { write } for pid=21553 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1045.718738][T12165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1045.742370][T12165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1045.766685][ T29] audit: type=1400 audit(1787584558.015:5268): avc: denied { write } for pid=21564 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1045.789176][T12165] bond0 (unregistering): Released all slaves [ 1045.807399][T12165] bond1 (unregistering): left allmulticast mode [ 1045.813683][T12165] bond1 (unregistering): left promiscuous mode [ 1045.830142][T12165] team0: Port device macvlan2 removed [ 1045.841285][T12165] bond1 (unregistering): Released all slaves [ 1045.850716][T12165] bond2 (unregistering): Released all slaves [ 1045.902653][T12165] tipc: Disabling bearer [ 1045.916349][T12165] tipc: Left network mode [ 1045.991826][T12165] hsr_slave_0: left promiscuous mode [ 1045.999966][T12165] hsr_slave_1: left promiscuous mode [ 1046.015693][T12165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.035580][T12165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.046931][T12165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1046.056415][T12165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.079595][T12165] veth1_macvtap: left promiscuous mode [ 1046.095153][T12165] veth0_macvtap: left promiscuous mode [ 1046.102876][T12165] veth1_vlan: left promiscuous mode [ 1046.114688][T12165] veth0_vlan: left promiscuous mode [ 1046.126966][ T29] audit: type=1400 audit(1787584558.375:5269): avc: denied { write } for pid=21567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1046.220302][ T29] audit: type=1400 audit(1787584558.475:5270): avc: denied { write } for pid=21578 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1046.270763][T12165] team0 (unregistering): Port device team_slave_1 removed [ 1046.295003][T12165] team0 (unregistering): Port device team_slave_0 removed [ 1046.334090][ T5259] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1046.540570][ T29] audit: type=1400 audit(1787584558.795:5271): avc: denied { write } for pid=21580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1046.596786][ T29] audit: type=1400 audit(1787584558.845:5272): avc: denied { write } for pid=21591 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1046.740899][ T29] audit: type=1400 audit(1787584558.995:5273): avc: denied { write } for pid=21593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1046.793246][ T29] audit: type=1400 audit(1787584559.045:5274): avc: denied { write } for pid=21604 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1047.164748][ T5259] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1047.346931][ T5259] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1047.528127][ T5259] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1047.709088][ T5259] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1047.891103][ T5259] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1048.075257][ T5259] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1048.255811][ T5259] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1048.435165][ T5259] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1048.619812][ T5259] 8021q: adding VLAN 0 to HW filter on device eth30 [ 1048.800049][ T5259] 8021q: adding VLAN 0 to HW filter on device eth31 [ 1048.981578][ T5259] 8021q: adding VLAN 0 to HW filter on device eth29 [ 1049.026579][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1049.032859][ T1304] ieee802154 phy1 wpan1: encryption failed: -22